summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* python3-identify: Upgrade 2.6.13 -> 2.6.15Leon Anavi2026-01-121-1/+1
| | | | | | | | | | | Upgrade to release 2.6.15: - Add .piskel extension - Fix: make PKGBUILD files a superset of .bash - [pre-commit.ci] pre-commit autoupdate Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* opencv: upgrade 4.12.0 -> 4.13.0Liu Yiding2026-01-123-109/+12
| | | | | | | | | | | | | | | 1.Changelogs https://github.com/opencv/opencv/wiki/OpenCV-Change-Logs#version4130 2.Remove following patches as they have been merged in upstream. 27691.patch 0001-Renamed-templated-BlocksCompensator-feed-method-to-e.patch 3.After upgrading to 4.13.0, WITH_KLEIDICV is ON as default in aarch64, so build kleidicv along with openCV in aarch64. Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* menulibre: fix do_install failedHongxu Jia2026-01-122-1/+62
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Use pip 25.3 to install failed ... Traceback (most recent call last): File "menulibre-2.4.0/setup.py", line 245, in <module> DistUtilsExtra.auto.setup( ~~~~~~~~~~~~~~~~~~~~~~~~~^ name='menulibre', ^^^^^^^^^^^^^^^^^ ...<12 lines>... cmdclass={'install': InstallAndUpdateDataDirectory} ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ ) ^ File "recipe-sysroot-native/usr/lib/python3.13/site-packages/DistUtilsExtra/auto.py", line 98, in setup __requires(attrs, src_all) ~~~~~~~~~~^^^^^^^^^^^^^^^^ File "recipe-sysroot-native/usr/lib/python3.13/site-packages/DistUtilsExtra/auto.py", line 471, in __requires __add_imports(imports, s, attrs) ~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^ File "recipe-sysroot-native/usr/lib/python3.13/site-packages/DistUtilsExtra/auto.py", line 405, in __add_imports if alias.name and __external_mod(cur_module, alias.name, attrs): ~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "recipe-sysroot-native/usr/lib/python3.13/site-packages/DistUtilsExtra/auto.py", line 377, in __external_mod return 'dist-packages' in mod.__file__ or 'site-packages' in mod.__file__ or \ ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ TypeError: argument of type 'NoneType' is not iterable ... Refer [1] to correct one line in setup.py [1] https://github.com/epoptes/epoptes/commit/81be63961a428728601df6f442490638df3bd263 Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nng: add ptestYi Zhao2026-01-122-3/+29
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Ptest results on genericx86-64 BSP: $ run-ptest PASS: compat_block PASS: compat_bug777 PASS: compat_bus PASS: compat_cmsg PASS: compat_device PASS: compat_iovec PASS: compat_msg PASS: compat_options PASS: compat_pair PASS: compat_pipeline PASS: compat_poll PASS: compat_reqrep PASS: compat_reqttl PASS: compat_shutdown PASS: compat_survey PASS: compat_surveyttl PASS: cplusplus_pair PASS: device PASS: files FAIL: httpclient PASS: httpserver PASS: inproc PASS: ipc PASS: ipcsupp PASS: multistress PASS: nonblock PASS: options PASS: pipe PASS: pollfd PASS: reqctx PASS: reqstress PASS: scalability PASS: synch PASS: tcp PASS: tcp6 PASS: tcpsupp PASS: tls PASS: ws PASS: wss The httpclient case attempts to retrieve the Content-Length field from HTTP header of http://example.com/, but because the site uses chunked transfer encoding, the Content-Length field is not present, leading to an assertion failure. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* boinc-client: set CVE_PRODUCTGyorgy Sarvari2026-01-121-0/+3
| | | | | | | | | | | | | | | | The relevant CVEs are tracked with underscore in their name. See CVE db query: sqlite> select vendor, product, count(*) from PRODUCTs where product like '%boinc%' group by 1, 2; berkeley|boinc_client|2 berkeley|boinc_forum|1 universityofcalifornia|boinc_client|165 universityofcalifornia|boinc_server|5 Set the CVE_PRODUCT accordingly. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* asyncmqtt: set CVE_PRODUCTGyorgy Sarvari2026-01-121-0/+2
| | | | | | | | | | | | The CVEs are tracked with an underscore in the product name: sqlite> select * from PRODUCTs where product like '%async%mq%'; CVE-2025-65503|redboltz|async_mqtt|10.2.5|=|| This patch sets the correct CVE_PRODUCT. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nginx: ignore CVE-2025-53859 for 1.28.1Peter Marko2026-01-121-0/+2
| | | | | | | | | Fix is included via commit [1]. [1] https://github.com/nginx/nginx/commit/fbbbf189dadf3bd59c2462af68c16f2c2874d4ee Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libsodium: patch CVE-2025-69277Peter Marko2026-01-122-0/+63
| | | | | | | | | Pick patch per [1]. [1] https://nvd.nist.gov/vuln/detail/CVE-2025-69277 Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libcanberra: add runtime recommendation for sound-theme-freedesktopMarkus Volk2026-01-121-0/+1
| | | | | | | Required to actually play event sounds Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nng: upgrade 1.7.3 -> 1.11Yi Zhao2026-01-121-3/+2
| | | | | | | | | | | ChangeLog: https://github.com/nanomsg/nng/releases/tag/v1.11 https://github.com/nanomsg/nng/releases/tag/v1.10 https://github.com/nanomsg/nng/releases/tag/v1.9.0 https://github.com/nanomsg/nng/releases/tag/v1.8.0 Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nanomsg: add ptestYi Zhao2026-01-122-2/+31
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Ptest results: $ run-ptest PASS: async_shutdown PASS: block PASS: bug328 PASS: bug777 PASS: bus PASS: cmsg PASS: device PASS: device4 PASS: device5 PASS: device6 PASS: device7 PASS: domain PASS: emfile PASS: hash PASS: inproc PASS: inproc_shutdown PASS: iovec PASS: ipc PASS: ipc_shutdown PASS: ipc_stress PASS: list PASS: msg PASS: pair PASS: pipeline PASS: poll PASS: prio PASS: pubsub PASS: reqrep PASS: reqttl PASS: separation PASS: shutdown PASS: stats PASS: survey PASS: surveyttl PASS: symbol PASS: tcp PASS: tcp_shutdown PASS: term PASS: timeo PASS: trie PASS: ws PASS: ws_async_shutdown PASS: zerocopy Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nanomsg: upgrade 1.2.1 -> 1.2.2Yi Zhao2026-01-122-60/+2
| | | | | | | | | | | ChangeLog: https://github.com/nanomsg/nanomsg/releases/tag/1.2.2 Drop 0001-allow-build-with-cmake-4.patch as the issue has been fixed upstream. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-filelock: add ptest supportGyorgy Sarvari2026-01-123-1/+15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The tests take <15s to execute. Sample output: root@qemux86-64:~# ptest-runner START: ptest-runner 2026-01-09T18:00 BEGIN: /usr/lib/python3-filelock/ptest PASS: tests/test_async_filelock.py:test_simple[a-str-AsyncUnixFileLock] PASS: tests/test_async_filelock.py:test_simple[a-str-AsyncSoftFileLock] PASS: tests/test_async_filelock.py:test_simple[a-PurePath-AsyncUnixFileLock] PASS: tests/test_async_filelock.py:test_simple[a-PurePath-AsyncSoftFileLock] PASS: tests/test_async_filelock.py:test_simple[a-Path-AsyncUnixFileLock] PASS: tests/test_async_filelock.py:test_simple[a-Path-AsyncSoftFileLock] [...many lines...] PASS: tests/test_filelock.py:test_mtime_zero_exit_branch[SoftFileLock-TimeoutError] PASS: tests/test_filelock.py:test_mtime_zero_exit_branch[UnixFileLock-PermissionError] PASS: tests/test_virtualenv.py:test_virtualenv ============================================================================ Testsuite summary DURATION: 10 END: /usr/lib/python3-filelock/ptest 2026-01-09T18:00 STOP: ptest-runner TOTAL: 1 FAIL: 0 (There are 20 Windows-only tests, which are skipped) Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-send2trash: add ptest supportGyorgy Sarvari2026-01-124-1/+66
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The tests take less than a second to execute. The current source distribution is missing a test file, which I added with a patch. The problem is already solved by upstream just not tagged yet - the patch can be dropped with the next update. Sample output: root@qemux86-64:~# ptest-runner START: ptest-runner 2026-01-09T17:11 BEGIN: /usr/lib/python3-send2trash/ptest SKIP: tests/test_plat_win.py:tests/test_plat_win.py # SKIP Skipping windows-only tests PASS: tests/test_plat_other.py:test_trash PASS: tests/test_plat_other.py:test_multitrash PASS: tests/test_plat_other.py:test_trash_bytes PASS: tests/test_plat_other.py:test_trash_unicode PASS: tests/test_plat_other.py:test_trash_topdir PASS: tests/test_plat_other.py:test_trash_topdir_fallback PASS: tests/test_plat_other.py:test_trash_topdir_failure PASS: tests/test_plat_other.py:test_trash_symlink PASS: tests/test_script_main.py:test_trash PASS: tests/test_script_main.py:test_no_args ============================================================================ Testsuite summary DURATION: 1 END: /usr/lib/python3-send2trash/ptest 2026-01-09T17:11 STOP: ptest-runner TOTAL: 1 FAIL: 0 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libcanberra: update 0.30 -> 0.30-19Markus Volk2026-01-125-288/+47
| | | | | | | | | | | | | | | | Lennart Poettering stopped maintaining libcanberra over a decade ago but it is still maintained by the debian gnome-team. Most notable improvement is that building the libcanberra-gtk3-module doesn't depend on gtk2 anymore and thus libcanberra isn't dependent on x11 to build support for gtk3 - fetch source from salsa.debian.org, use git for it - remove outdated patches - dont build gtk+ module by default anymore - simplify packaging Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-gcovr: Upgrade 8.3 -> 8.5Leon Anavi2026-01-122-8/+8
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Upgrade to release 8.5: Breaking changes: - The option --lcov-test-name doesn't accept values with spaces anymore. - The option --lcov-format-1.x is deprecated and mapped to --lcov-format-version=1.x. - Changes to HTML templates. New features and notable changes: - Due to added support for LLVM source based code coverage format some configuration file keys got changed. The old gcov named options are still supported but they also affect the LLVM toolchain. Bug fixes and small improvements: - Fix coveralls report if there are several coverage elements per line. - Fix not excluded conditions if branches are excluded by comments. - Fix reported excluded branches in LCOV report. - Fix exclusion filter --gcov-exclude. - Add --json-trace-data-source to include the trace data source in the JSON report independent from --verbose. - Remove generated gcov files on error and catch additional gcov error message. - Change default HTML theme excluded line color. - Move theme colors to a separate CSS file so they can be overridden with a simple --html-template-dir directory with only the style.colors.css file. - Fix regular expression for detecting a version mismatch between gcc and gcov. - Improve logging messages for GCOV execution errors to not print information twice and add trace messages for gcov execution. - Fix handling of lines after function specialization. - Improve performance by changing logging messages (level and lazy interpolation). - Fix text report for covered decisions. - Fix runtime problem introduced with 8.4. - Fix wrong entries in data source attribute of JSON report. - Fix nested HTML report without coverage data. - Add warning if coverage data is empty. - Add warning if function lines are missing in external generated GCOV files. - Extend support for zipped reports. If last suffix is .xz then LZMA is used to compress the report. - Fix function exclusion in report generation. - Do not ignore lines without functions, e.g. from inlined code. - Ignore all whitespaces instead of only spaces for detection of noncode lines. - Add support for temporary merging line coverage objects without modifying the data model. - Change internal behavior of --exclude-function-lines to exclude the line of function definition instead of removing it completely. - Ensure that all functions have a line coverage element in LCOV report. License-Update: Update years Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-xmlschema: Upgrade 4.2.0 -> 4.3.0Leon Anavi2026-01-121-2/+2
| | | | | | | | | | | | | | | | | | | | | Upgrade to release 4.3.0: - Add arguments validation for schemas and validation methods (by validation contexts) - Add custom XPath parser for find/findall/iterfind APIs on schemas for match singleton sequence also if position is a number greater than 1 in predicate expression - Improve build of XSD elements and groups, using a three-state built flag for components - Extend and fix memory tests (Python 3.14+ seems to consume more memory) - Drop support for Python 3.9 and add development support for Python 3.15 License-Update: Update years Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-fsspec: Upgrade 2025.5.1 -> 2025.12.0Leon Anavi2026-01-121-1/+1
| | | | | | | | | | | | | | | Upgrade to release 2025.12.0: - fsspec.parquet to support filters and multiple files - passing withdirs in aync _glob() - fix _rm_file/_rm redirection in async - allow arrowFile to be seekable - add size attribute to arrowFile - support py3.14 and drop 3.9 - avoid ruff warning Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-typer: Upgrade 0.21.0 -> 0.21.1Leon Anavi2026-01-121-1/+1
| | | | | | | | | Upgrade to release 0.21.1: - Fix escaping in help text when rich is installed but not used. Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-twitter: mark CVE-2012-5825 patchedGyorgy Sarvari2026-01-121-0/+1
| | | | | | | | | | | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2012-5825 The Debian bugtracker[1] indicated that the issue is tracked by upstream in github[2] (with a difference CVE ID, but same issue), where the vulnerability was confirmed. Later in the same github issue the solution is confirmed: the project switched to use the requests library, which doesn't suffer from this vulnerability. Due to this mark the CVE as patched. [1]: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=692444 [2]: https://github.com/tweepy/tweepy/issues/279 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-uvicorn: mark CVE-2020-7694 patchedGyorgy Sarvari2026-01-121-0/+1
| | | | | | | | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2020-7694 The vulnerability was reported to the project[1], and the commit[2] that resolved the issue has been part of the project since version 0.11.7. Mark the CVE as patched due to this. [1]: https://github.com/Kludex/uvicorn/issues/723 [2]: https://github.com/Kludex/uvicorn/commit/895807f94ea9a8e588605c12076b7d7517cda503 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-reportlab: mark CVE-2020-28463 patchedGyorgy Sarvari2026-01-121-0/+1
| | | | | | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2020-28463 According to Debian[1] it has been fixed since version 3.5.55[2] Mark is as patched. [1]: https://security-tracker.debian.org/tracker/CVE-2020-28463 [2]: https://hg.reportlab.com/hg-public/reportlab/rev/7f2231703dc7 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libcereal: set CVE_PRODUCTGyorgy Sarvari2026-01-121-0/+2
| | | | | | | | | | | | | The relevant CVEs are associated with usc:cereal CPE. See CVE db query: sqlite> select * from PRODUCTS where PRODUCT like '%cereal%'; CVE-2020-11104|usc|cereal|||1.3.0|<= CVE-2020-11105|usc|cereal|||1.3.0|<= Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* xfce4-settings: rename libcanberra rrecommendsMarkus Volk2026-01-121-3/+2
| | | | | Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* gnome-disk-utility: remove outdated patchMarkus Volk2026-01-122-139/+3
| | | | | | | | Dont remove libcanberra dependency. Meanwhile it can be built without pulling in gtk2 Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-aiohttp: upgrade 3.13.2 -> 3.13.3Jiaying Song2026-01-121-1/+1
| | | | | | | Changelog:https://docs.aiohttp.org/en/stable/changes.html Signed-off-by: Jiaying Song <jiaying.song.cn@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* fex: uodate 2511 -> 2601Markus Volk2026-01-121-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | FEX Release FEX-2601 ARM64Emitter Force NOP padding to be enabled (9e8915e) Arm64Emitter Initial work for LoadConstant padding audit (d582356) BranchOps Use RIP relocs for direct branch targets (c57df73) CMake Move CMakeModules to Data/CMake (651ef64) Fix mingw if host has libxxhash-dev installed (900c179) Support overriding version/hash via CMake args (19d3450) CodeCache Fix misparenthesized expression in SaveData() (9101e70) Rebase block entrypoint info (5747d1c) Make LoadData Thread argument an optional pointer (bc069f2) Implement automatic cache generation (eb425fe) Implement runtime cache validation (93f6a8c) Trigger delayed cache loading for the main executables and its interpreter (71c8436) Implement cache loading (ec67670) Common Use LOCALAPPDATA for GetCacheDirectory on WOW64/ARM64EC (499970d) Config Remove stdout from OutputLog (e1c6a91) Dispatcher Silence warning on ARM64EC (9a12868) FEXCore Cleanup pointers structure (b29a78c) Fixes circular dependency with thunk callback (5627ddf) Switch constant emission to default to NoPad (2b4492c) Revert literal optimization from #4884 (da46d51) FEXOfflineCompiler Implement SyscallHandler::LookupExecutableFileSection (5ca549e) FEXServer Add protocol interface to request code cache population (805a4c1) Frontend Only decode REX if it is at the correct location (c8d72ea) Also fetch relocations and section bounds when validating (0a18ea8) ImageTracker Load AOT images (a3779be) Load PE relocations when generating code caches (b87bb1d) Support codemap file generation (c54dfd9) Track loaded PE images for LookupExecutableFileSection (212a3f4) Interpreter Moves around the thread and ELF initialization code (ed1d495) JIT Fixes typo (c4258be) LinuxSyscalls x32 Fixes fcntl assert (6c06f47) LookupCache Fix mistake in nested CacheBlockMapping call (a957f1f) OpcodeDispatcher Explicitly calculate flags after _TelemetrySetValue (281981e) Relocations Disable 6-byte size optimization in InsertGuestRIPMove (c7eb4c8) Switch to robin_map to improve lookup perf (4889596) SHMStats Avoid ISB usage when stats are disabled (6a49b8c) Scripts Have InstallFEX check kernel version (b407688) Steam Don't let the FEXServer inherit FEXServerManager's original stdout (53925dc) Syscalls Fix DEBUG_STRACE printing (e859109) Thunks Vulkan Update for v1.4.337 (668e027) Tools pidof Fixes FEXpidof after #5097 (7e4e017) VDSO Forgot to remove a if check (144c4bf) WOW64 Lock the JIT context and block suspend during context operations (a25d90d) WinAPI Implement Sleep (37b0e9e) Windows Improve handling of RWX memory (d592e2a) Invalidate code in freed memory after the free syscall (cb7de45) Fix RtlWaitOnAddress signature (f098b41) Implement _[w]sopen file APIs (f819999) Introduce ImageTracker for tracking per-loaded-image data (dc764db) Switch GetSection/ExecutableFilePath to returning full paths (956f97e) Split out CRT/WinAPI reimplementation (ebdbf58) WritePriorityMutex Add some more documentation (9fa8148) Fix rare case of dropped read waiter wakes (ce9824a) Misc [cmake] explicit platform and bit-width checks (dbd802c) [cmake] more parenthesis cleanups, linker gc module, more same-line stuff (1f6b3d5) [cmake] refactor: compiler and architecture handling (51f6722) [cmake] better option descriptions + more consistent language (9c0c969) Constant audit (fd2ee4e) _Constant audit (851fbae) First round of LoadConstant auditing (5bbbe4d) [cmake] Use a Find module for xxhash (5a47565) [cmake] do not use uppercase command names (f24f88e) [cmake] reduce usage of trivial variables (0edf961) [cmake] prefer end parenthesis on same line, no space after some calls (b41b967) [cmake] FEXCore: further reduce library redundancy (f153d86) [cmake] propagate -ISource to all Tools (bd8f6f1) [cmake] use MINGW builtin rather than custom detection (7cdef04) Some minor NFC (974ba78) Guest relocation support (fef1993) Various trivial fixes for #5106 (296988b) code-format-helper: Update urllib3 dependency (2e2563a) github steamrt4 Additional comments (bf9ab7f) unittests ASM Adds test for flags clobber in TelemetrySetValue (eb27576) Test 32-bit displacement encoding (d197300) FEXLinuxTests Fix gcc build (fedebf4) Force clang building for tests (62383a1) Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* raptor2: set CVE_PRODUCTGyorgy Sarvari2026-01-121-0/+2
| | | | | | | | | | | | | | | | | All relevant CVEs are files against these CPEs. See CVE db query (zediious vendor is not relevant): sqlite> select * from PRODUCTs where PRODUCT like '%raptor%' and vendor <> 'symantec' and product <> 'velociraptor'; CVE-2012-0037|librdf|raptor|||2.0.7|< CVE-2017-18926|librdf|raptor_rdf_syntax_library|2.0.15|=|| CVE-2020-25713|librdf|raptor_rdf_syntax_library|2.0.15|=|| CVE-2023-49078|zediious|raptor-web|0.4.4|=|| CVE-2024-57822|librdf|raptor_rdf_syntax_library|||2.0.16|<= CVE-2024-57823|librdf|raptor_rdf_syntax_library|||2.0.16|<= Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* pavucontrol: update 5.0 -> 6.2Markus Volk2026-01-123-139/+22
| | | | | | | | | | | | | - switch to meson buildsystem - pavucontrol now requires gtk4 and thus requires gpu acceleration - remove patch. Meanwhile libcanberra is optional and build doesn't fail without anymore - pavucontrol was migrated from intltool to gettext - add packageconfigs for libcanberra and lynx to have both disabled by default Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* xfce4-pulseaudio-plugin: unbreak build with pavucontrol6Markus Volk2026-01-121-4/+4
| | | | | | | | | | | 'pavucontrol-6' requires gtk4 and thus also needs gpu acceleration Only recommend to install pavucontrol if it would run - remove x11 from DISTRO_FEATURES. There's no direct dependency on it - add PACKAFECONFIG for libcanberra Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* imlib2: upgrade 1.12.5 -> 1.12.6Wang Mingyu2026-01-121-3/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: ========== - Y4M loader: add support for 10-bit 4:4:4 - Y4M loader: add support for 10-bit 4:2:2 - Y4M loader: add example for 8-bit mono - Y4M loader: add support for 10-bit mono - Y4M loader: fix support for full-range mono - Y4M loader: fix support for odd dimensions - Y4M loader: add support for 12/14/16-bit mono - test/images: Remove intermediate generated file - imlib2_view: Set title - imlib2_view: Scale image when resizing window - imlib2_view: A couple of fixes to previous commit - test_load_2: Add new y4m test images - test_load_2: Add more new y4m test images - test_load_2: Add more new y4m test images - autofoo: Use AM_LIBTOOLFLAGS, not LIBTOOLFLAGS - gradients: Fix rendering of gradients in larger images - imlib2_conv: Fix constness warning - gradients: Better gradients with angles - Compile cleanly with -Wdouble-promotion - XPM loader: Add missing progress callback on incomplete image data Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libsdl3: upgrade 3.2.28 -> 3.2.30Liu Yiding2026-01-121-1/+1
| | | | | | | | Changelog: https://github.com/libsdl-org/SDL/releases/tag/release-3.2.30 Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* xfce4-session: upgrade 4.20.0 -> 4.20.3Jason Schonberg2026-01-121-2/+7
| | | | | | | | | | | | | | | | | | | | | | checking for glib-compile-resources... configure: error: could not find glib-compile-resources. Fix configure failure by adding to EXTRA_OECONF parameters. ERROR: xfce4-session-4.20.2-r0 do_package: QA Issue: xfce4-session: Files/directories were installed but not shipped in any package: /usr/share/xfce4 /usr/share/xfce4/labwc /usr/share/xfce4/labwc/labwc-environment /usr/share/xfce4/labwc/labwc-rc.xml Update FILES to fix QA error. Changelog: https://gitlab.xfce.org/xfce/xfce4-session/-/tags/xfce4-session-4.20.3 Changelog: https://gitlab.xfce.org/xfce/xfce4-session/-/tags/xfce4-session-4.20.2 Changelog: https://gitlab.xfce.org/xfce/xfce4-session/-/tags/xfce4-session-4.20.1 Signed-off-by: Jason Schonberg <schonm@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-h2: remove ptest execution deadlineGyorgy Sarvari2026-01-121-0/+6
| | | | | | | | | | | | | | | Hypothesis Python module applies a 200ms default timeout value on the tests, that can be violated too easily in qemu without kvm support. Hypothesis however also has a feature, that in case it is running in a CI environment, it expects that the host has more load, and it removes this deadline. To switch to the CI profile and relax the execution timeouts, this patch defines the "CI" environment variable in the run-ptest script. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libjxl: Fix build error with arm and muslAnkur Tyagi2026-01-121-0/+3
| | | | | | | | | Build fails for qemuarm with musl with following error: /build/tmp/work/cortexa15t2hf-neon-poky-linux-musleabi/libjxl/0.11.1/sources/libjxl-0.11.1/lib/jxl/convolve_separable5.cc | error: out of range pc-relative fixup value Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mozjs-128: Fix build error with arm and muslAnkur Tyagi2026-01-1214-32/+75
| | | | | | | | | | | | | Build fails for qemuarm with musl with following error: mozglue/misc/StackWalk.o: in function `unwind_callback(_Unwind_Context*, void*)': | /usr/src/debug/mozjs-128/128.5.2/mozglue/misc/StackWalk.cpp:810:(.text._ZL15unwind_callbackP15_Unwind_ContextPv+0x4): undefined reference to `_Unwind_GetIP' Referenced commit[1] for the fix, also refreshed patches. [1] https://github.com/OSSystems/meta-browser/commit/bb8662912354dae13634c0ec35c3803c344b1e72 Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-bleak: upgrade 2.0.0 -> 2.1.1Wang Mingyu2026-01-122-2/+8
| | | | | | | | | | | | | | | 1. Changelog: https://github.com/hbldh/bleak/blob/v2.1.1/CHANGELOG.rst 2. Skip integration tests in ptest After upgrade to 2.1.1, a new test set integration was added. https://github.com/hbldh/bleak/tree/v2.1.1/tests/integration According to the description, the tests need kernel module hci_vhci, but hci_vhci is disabled in yocto, so skip these tests. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-m2crypto: mark CVE-2020-25657 as patchedGyorgy Sarvari2026-01-121-0/+1
| | | | | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2020-25657 The commit[1] that fixes the vulnerability has been part of the package since version 0.39.0 [1]: https://git.sr.ht/~mcepl/m2crypto/commit/84c53958def0f510e92119fca14d74f94215827a Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-m2crypto: ignore CVE-2009-0127Gyorgy Sarvari2026-01-121-0/+2
| | | | | | | | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2009-0127 The vulnerability is disputed[1] by upstream: "There is no vulnerability in M2Crypto. Nowhere in the functions are the return values of OpenSSL functions interpreted incorrectly. The functions provide an interface to their users that may be considered confusing, but is not incorrect, nor it is a vulnerability." [1]: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-0127 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tcpdump: upgrade 4.99.5 -> 4.99.6Wang Mingyu2026-01-122-7/+4
| | | | | | | | add-ptest.patch refreshed for 4.99.6 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* spdlog: upgrade 1.16.0 -> 1.17.0Wang Mingyu2026-01-121-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | License-Update: updated contributors. Changelog: ========== - Bump bundled {fmt} library to 12.1.0 - Fix the %z formatter (UTC offset): - Windows: Replaced implementation for better accuracy and speed - FreeBSD: Fixed incorrect implementation - Fixed issue where the offset was not displaying as +00:00 when the formatter was configured to show UTC time. - Removed unreliable fallback for Unix systems lacking tm_gmtoff. If compilation fails on such platforms, use SPDLOG_NO_TZ_OFFSET=ON (%z will display +??:?? instead of compilation error). - Set CMAKE_BUILD_TYPE only in top-level project - Change access scope for ANSI target_file_ from private to protected - Fix UWP detection - Fix include <fcntl.h> in tcp_client.h to avoid compilation failures - Tests: Fix unit tests to respect default level names - Docs: Fix misleading comment in blocking_queue header - Fix sign-compare warning - Fix sign conversion warnings in qt_sinks.h Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* rtorrent: upgrade 0.16.5 -> 0.16.6Wang Mingyu2026-01-121-1/+1
| | | | | | | | | | | | | | | | | | | | | | Features --------- Added timestamp helper commands Use separate thread for saving session data Run multiple session save requests in parallel Changed magnet metadata handling and added 'magnet.path.set' Optimizations ------------- Use map rather than vector for Poll tables Bug Fixes ----------- Convert IPv4in6 addresses to IPv4 in outgoing handshakes Force clear bitfield ranges of downloads that get hashed Use CURLOPT_CLOSESOCKETFUNCTION to properly handle libcurl closing sockets before CURL_POLL_REMOVE Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-types-psutil: upgrade 7.1.1.20251122 -> 7.2.1.20251231Wang Mingyu2026-01-121-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-pillow: upgrade 12.0.0 -> 12.1.0Wang Mingyu2026-01-121-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-nocaselist: upgrade 2.1.0 -> 2.2.0Wang Mingyu2026-01-121-1/+1
| | | | | | | | Changelog: https://nocaselist.readthedocs.io/en/2.2.0/changes.html Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-nocasedict: upgrade 2.1.0 -> 2.2.0Wang Mingyu2026-01-121-1/+1
| | | | | | | | Changelog: https://nocasedict.readthedocs.io/en/2.2.0/changes.html Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-moteus: upgrade 0.3.96 -> 0.3.97Wang Mingyu2026-01-121-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-marshmallow: upgrade 4.1.2 -> 4.2.0Wang Mingyu2026-01-121-1/+1
| | | | | | | | Changelog: many argument of Nested properly overrides schema instance value. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nbdkit: upgrade 1.46.0 -> 1.47.1Wang Mingyu2026-01-121-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libtracefs: upgrade 1.8.2 -> 1.8.3Wang Mingyu2026-01-121-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2026-04-21 21:31:56 +0000