summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* pgpool2: upgrade 4.5.5 -> 4.6.3Gyorgy Sarvari2025-10-083-85/+338
| | | | | | | | | | | | Drop 0001-fix-compiling-on-32-bit-systems.patch, and change to another patch that solves the same issue in OE, but is more likely to be adapted by upstream (after discussion with upstream in https://github.com/pgpool/pgpool2/pull/128) Shortlog: https://github.com/pgpool/pgpool2/compare/V4_5_5...V4_6_3 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-beautifulsoup4: Upgrade 4.13.5 -> 4.14.2Leon Anavi2025-10-081-1/+1
| | | | | | | | | | | | | | Upgrade to release 4.14.2: - Making ResultSet inherit from MutableSequence still resulted in too many breaking changes in users of the library, so it was reverted the ResultSet code back to where it was in 4.13.5 and added tests of all known breaking behavior. [bug=2125906] - Version 4.14.0 adds function overloading to the find_* methods to make it easier to write type-safe Python. Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-dbus-fast: Upgrade 2.44.1 -> 2.44.5Leon Anavi2025-10-082-5/+6
| | | | | | | | | | | Upgrade to release 2.44.5: - fix: cibuildwheel sha - Improve unmarshall performance for SignatureType - Simplify code to unmarshall arrays Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* valkey: Upgrade 8.1.3 -> 8.1.4Leon Anavi2025-10-081-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Upgrade to release 8.1.4: Security fixes: - (CVE-2025-49844) A Lua script may lead to remote code execution - (CVE-2025-46817) A Lua script may lead to integer overflow and potential RCE - (CVE-2025-46818) A Lua script can be executed in the context of another user - (CVE-2025-46819) LUA out-of-bound read Bug fixes: - Fix accounting for dual channel RDB bytes in replication stats - Fix EVAL to report unknown error when empty error table is provided - Fix use-after-free when active expiration triggers hashtable to shrink - Fix MEMORY USAGE to account for embedded keys - Fix memory leak when shrinking a hashtable without entries - Prevent potential assertion in active defrag handling large allocations - Prevent bad memory access when NOTOUCH client gets unblocked - Converge divergent shard-id persisted in nodes.conf to primary's shard id - Fix client tracking memory overhead calculation - Fix RDB load per slot memory pre-allocation when loading from RDB snapshot - Don't use AVX2 instructions if the CPU doesn't support it - Fix bug where active defrag may be unable to defrag sparsely filled pages Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* emacs: Use GNU_MIRROR in SRC_URIKhem Raj2025-10-081-2/+3
| | | | | | | | Sometimes ftp.gnu.org might be slow. Add UPSTREAM_CHECK_URI while here Signed-off-by: Khem Raj <raj.khem@gmail.com> Cc: Gyorgy Sarvari <skandigraun@gmail.com>
* nbdkit: upgrade 1.45.1 -> 1.45.9Gyorgy Sarvari2025-10-081-1/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | While working on it, also ignore CVE-2025-47711 and CVE-2025-47712. Both vulnerabilities are fixed already (they were fixed before the upgrade also, but there is no version-range associated with the CVE report). CVE-2025-47711: https://gitlab.com/nbdkit/nbdkit/-/commit/e6f96bd1b77c0cc927ce6aeff650b52238304f39 CVE-2025-47712: https://gitlab.com/nbdkit/nbdkit/-/commit/a486f88d1eea653ea88b0bf8804c4825dab25ec7 Shortlog: Merge branch '2025-optional-qemu-img' into 'master' build: Check for qemu-img and disable some tests if not present tests/curl: Skip test if 'disk' was not created server/public.c: Use common/include parse_bool function common/include: Extra bool parsing into a mini-library docs: Shorter title and tweaks to the description indexed-gzip: Include <stddef.h> to get ptrdiff_t indexed-gzip: Move variable decl outside for loop vddk: Sort synopsis into alphabetical order ext2: Update docs since filter supports concurrent connections docs: Move --short/--long-options to right place in synopsis (origin/rhel-10.2) docs: Document how to probe for server command line options server: Document --long-options and --short-options docs/nbdkit-probing.pod: Rearrange synopsis to match description server: Add --name parameter docs: Fix bolding of --log=/path option tests/test-python-plugin.py: Remove unused variables python: Add binding for nbdkit_parse_bool tests/test-python-plugin.py: Add name of test for test_parse_size (tag: v1.45.6) Version 1.45.6. Merge branch '2025-rounding' into 'master' server/public.c: Use lrint() instead of implicit conversion to int indexed-gzip: Fixes for 32-bit support indexed-gzip: More editorially neutral content Merge branch 'add-indexed-gzip-filter' into 'master' Introduce index-gzip filter Move unmodified index build/extract to ig_zran.h/c Add serialize/deserialize fn for zran structs Restructure zran.h, zran.c for use as library Import zran.c/zran.h v1.6 (2 Aug 2024) from zlib Merge branch '2025-delay-trigger' into 'master' delay: Add new delay-trigger option delay: Rearrange the options in alphabetical order in the documentation tests/test-map.sh: Fix "nbd_pread: count cannot be 0: Invalid argument" docs/nbdkit-client.pod: Document attaching NBD devices to QEMU VMs docs/nbdkit-client.pod: Combine and rename "LIMITATIONS" section Merge branch '2025-fix-golang-test' into 'master' tests/test-golang-fork-warning.sh: Fix hanging test Merge branch '2025-misc-fixes' into 'master' tests: Use 'define script' in a few more places tests: Modify make-pki and make-psk scripts to be atomic tests: Define common functions for requiring TLS certs and PSK tests/test-tls.sh: Remove unused export of pkidir tests: Generate make-psk.sh tests/make-psk.sh: Fix typo "pkstool" -> "psktool" tests: Fix typo "An good" -> "A good" map: Implement map-size feature tests/test-at-file.sh: Fix srcdir != builddir tests: Work around realpath error on BSDs Merge branch '2025-eq-file' into 'master' Merge branch '2025-server-debug' into 'master' server: Use debug() instead of nbdkit_debug() consistently in the server map: Refer to @PATH syntax in documentation server: Add @PATH syntax server/main.c: Factor out the function that parses key=value server/main.c: Fix comment server/main.c: Move key=value parsing to a new function server/options.h: Reject empty string ("") as a short name server/options.h: Add comment to is_short_name server/main.c: Reject empty string as a plugin name or filter name common: utils: Add const to <vector>_duplicate variable decls data: Use new vector_append_array in a couple of places map: Use new vector_append_array function instead of loop common: utils: vector: Fix vector_uniq prototype and add a test common: utils: vector: Add range functions for insert, append and remove common: utils: vector: Prefer vector_reset over free() Merge branch '2025-map-filter' into 'master' New filter: map for remapping arbitrary blocks common: utils: vector: Add new vector_uniq function tests/functions: Factor out 2^63-1 constant used by a few tests tests/test-cache-block-size.sh: Remove unused socket data: Minor revisions to the documentation for clarity full: Remove reference to equivalence of nbdkit-readonly-filter tests/test-floppy.sh: Simplify this test count: Add an example to the documentation common/include/test-once.c: Further fixes for pthread_barrier_t common/include/test-once.c: Skip test on macOS which lacks pthread_barrier_t Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* touchpademulator: Add recipeKhem Raj2025-10-083-0/+88
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libcupsfilters: upgrade 2.0.0 -> 2.1.1Gyorgy Sarvari2025-10-082-8/+8
| | | | | | | | | This contains a fix for CVE-2024-47076 Changelog: https://github.com/OpenPrinting/libcupsfilters/blob/2.1.1/CHANGES.md Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* samba: Add PACKAGECONFIG[ad-dc] python3-markdown RDEPENDSAndrew Bradford2025-10-081-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | For Samba's Active Directory Domain Controller functionality, it needs to have python3-markdown listed as an RDEPENDS as well as a DEPENDS. When trying to provision a domain with samba-tool without this change then it will error out like: $ samba-tool domain provision --realm=EXAMPLE.COM --domain=EXAMPLE \ --adminpass='YourPassword123!' --server-role=dc \ --dns-backend=SAMBA_INTERNAL --use-rfc2307 <snip> Temporarily overriding 'dsdb:schema update allowed' setting ERROR(<class 'ModuleNotFoundError'>): uncaught exception - No module named 'markdown' File "/usr/lib/python3.13/site-packages/samba/netcmd/init.py", line 279, in _run return self.run(*args, **kwargs) ~~~~~~~~^^^^^^^^^^^^^^^^^ File "/usr/lib/python3.13/site-packages/samba/netcmd/domain/provision.py", line 343, in run result = provision(self.logger, session, smbconf=smbconf, targetdir=targetdir, ...<16 lines>... backend_store=backend_store, backend_store_size=backend_store_size) File "/usr/lib/python3.13/site-packages/samba/provision/init.py", line 2404, in provision raise e File "/usr/lib/python3.13/site-packages/samba/provision/init.py", line 2394, in provision forest = ForestUpdate(samdb, fix=True) File "/usr/lib/python3.13/site-packages/samba/forest_update.py", line 212, in init from samba.ms_forest_updates_markdown import read_ms_markdown File "/usr/lib/python3.13/site-packages/samba/ms_forest_updates_markdown.py", line 27, in <module> import markdown Signed-off-by: Andrew Bradford <andrew.bradford@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libppd: upgrade 2.0.0 -> 2.1.1Gyorgy Sarvari2025-10-081-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This upgrade contains a fix for CVE-2024-47175. Changelog: 2.1.1: -pdftops: Use Poppler for a few old Epson laser printers This works around documents being printed off-centre, shifted towards the top right. Affected are printers using epsoneplijs: EPL-5700L, EPL-5800L, EPL-5900L, EPL-6100L, EPL-6200L. -Fixed bugs discovered by static analyzer OpenScanHub Possible buffer overflows, uninitialized memory, format string issues and resource leaks, ... -Fix crash bugs in ppdLoadAttributes() When parsing the "*cupsFilter(2): ..." lines in the PPD file use memmove() instead of strcpy() as the latter does not support handling overlapping memory portions and do not move running pointer beyond the end of the input string. 2.1.0: -Prevent PPD generation based on invalid IPP response Overtaken from CUPS 2.x: Validate IPP attributes in PPD generator, refactor make-and-model code, PPDize preset and template names, quote PPD localized strings. Fixes CVE-2024-47175. 2.1b: -Added support for libcups3 (libcups of CUPS 3.x) With these changes libcupsfilters can be built either with libcups2 (libcups of CUPS 2.x) or libcups3 (libcups of CUPS 3.x). -Prefer PDF again in PPDs for driverless printers PDF works better with finishing, especially combinations of multiple copies, collation, and stapling/binding. -Use 0.5mm as tolerance when comparing page sizes For the PWG two page sizes are considered the same when the dimensions differ no more than 0.5 mm, libppd used too tight tolerances. -PPD generator: Check for required attributes when choosing input format Check for PCLm and PWG the minimum of attributes which we require during PPD generation. -ppdLoadAttributes(): Improve check whether parameters are integer -ppdLoadAttributes(): Fix crash when page size could not get determined -Fix crash if there is no page size for "Custom" -Fix crash when incoming *ptr is NULL -libcups2 compatibility: Use proper CUPS array callback function types Fixed CUPS array function call in libcups2 compatibility layer -Build system: Fix failure to correctly link to zlib Look up zlib properly with pkg-config Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libraw: upgrade 0.21.2 -> 0.21.4Gyorgy Sarvari2025-10-082-13/+10
| | | | | | | | | | | | | | This upgrade contains fixes for the following vulnerabilities: CVE-2025-43961, CVE-2025-43962, CVE-2025-43963 and CVE-2025-43964 Also drop two old CVE_STATUS entries which are not needed anymore, because the database has been updated with correct info. Changelog: https://github.com/LibRaw/LibRaw/blob/master/Changelog.txt Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* luajit: ignore CVE-2024-2517{6,7,8}Gyorgy Sarvari2025-10-081-0/+4
| | | | | | | | | | | | All 3 CVEs are fixed in the currently used revision. Fixes: CVE-2024-25176: https://github.com/LuaJIT/LuaJIT/commit/343ce0edaf3906a62022936175b2f5410024cbfc CVE-2024-25177: https://github.com/LuaJIT/LuaJIT/commit/85b4fed0b0353dd78c8c875c2f562d522a2b310f CVE-2024-25178: https://github.com/LuaJIT/LuaJIT/commit/defe61a56751a0db5f00ff3ab7b8f45436ba74c8 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libssh: ignore CVE-2025-5318 and CVE-2025-5987Gyorgy Sarvari2025-10-081-0/+3
| | | | | | | | | | Both CVEs have been fixed in version 0.11.2. CVE-2025-5318: https://git.libssh.org/projects/libssh.git/commit/?id=5f4ffda88770f95482fd0e66aa44106614dbf466 CVE-2025-5987: https://git.libssh.org/projects/libssh.git/commit/?id=90b4845e0c98574bbf7bea9e97796695f064bf57 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* redis: ignore CVE-2022-3734 and CVE-2022-0543Gyorgy Sarvari2025-10-081-0/+2
| | | | | | | | | | | CVE-2022-3734 only affects Windows. CVE-2022-0543 affects only packages that were packaged for Debian and Debian-derivative distros. Neither of these issues is present in upstream Redis. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* redis: ignore CVE-2025-27151Gyorgy Sarvari2025-10-071-0/+1
| | | | | | | | The fix has been backported by upstream, and it is included in the used version: https://github.com/redis/redis/commit/d0eeee6e31f0fefb510007a8cfdf5dce729a8be9 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* redis: ignore CVE-2025-21605Gyorgy Sarvari2025-10-072-0/+4
| | | | | | | | | | | | | | | The fix has been backported to both redis versions by upstream, and both versions contain it already. For 6.2.20 [1] contains the backported fix. For 7.2.11 [2] contains the backported fix. [1]: https://github.com/redis/redis/commit/5e93f9cb9dbc3e7ac9bce36f2838156cbc5c9e62 [2]: https://github.com/redis/redis/commit/42fb340ce426364d64f5dccc9c2549e58f48ac6f Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-django: upgrade 4.2.20 -> 4.2.24Soumya Sambu2025-10-061-2/+2
| | | | | | | | | | | Release Notes: https://docs.djangoproject.com/en/dev/releases/4.2.24/ https://docs.djangoproject.com/en/dev/releases/4.2.23/ https://docs.djangoproject.com/en/dev/releases/4.2.22/ https://docs.djangoproject.com/en/dev/releases/4.2.21/ Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-django: Upgrade 5.2 -> 5.2.6Soumya Sambu2025-10-064-41/+10
| | | | | | | | | | | | | | | | Release notes: https://docs.djangoproject.com/en/5.2/releases/5.2.6/ https://docs.djangoproject.com/en/5.2/releases/5.2.5/ https://docs.djangoproject.com/en/5.2/releases/5.2.4/ https://docs.djangoproject.com/en/5.2/releases/5.2.3/ https://docs.djangoproject.com/en/5.2/releases/5.2.2/ https://docs.djangoproject.com/en/5.2/releases/5.2.1/ Drop patch 0001-Fixed-35980-Updated-setuptools-to-normalize-package.patch: already present in the upgraded version. Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* redis: upgrade 7.2.10 -> 7.2.11Gyorgy Sarvari2025-10-0610-1/+1
| | | | | | | | | | | Changelog: (CVE-2025-49844) A Lua script may lead to remote code execution (CVE-2025-46817) A Lua script may lead to integer overflow and potential RCE (CVE-2025-46818) A Lua script can be executed in the context of another user (CVE-2025-46819) LUA out-of-bound read Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* redis: upgrade 6.2.18 -> 6.2.20Gyorgy Sarvari2025-10-061-1/+1
| | | | | | | | | | | | | | | | | Changelog: 6.2.19: (CVE-2025-32023) Fix out-of-bounds write in HyperLogLog commands (CVE-2025-48367) Retry accepting other connections even if the accepted connection reports an error 6.2.20: (CVE-2025-49844) A Lua script may lead to remote code execution (CVE-2025-46817) A Lua script may lead to integer overflow and potential RCE (CVE-2025-46818) A Lua script can be executed in the context of another user (CVE-2025-46819) LUA out-of-bound read Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tinyproxy: upgrade 1.11.1 -> 1.11.2Gyorgy Sarvari2025-10-062-35/+1
| | | | | | | | | | This upgrade contains fixes for CVE-2023-49606 and CVE-2022-40468. Changelog: https://github.com/tinyproxy/tinyproxy/compare/1.11.1...1.11.2 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dovecot: upgrade 2.3.21.1 -> 2.4.1-4Gyorgy Sarvari2025-10-066-117/+58
| | | | | | | | | | | | | | | | | | Remove obsolete CVE_STATUS variable: CVE-2016-4983 is marked for v2.3. Drop 0001-not-check-pandoc.patch because it became obsolete, pandoc is not used anymore. Drop 1ccd5b54a408d12fce0c94ab0bbaedbb5ef69830.patch, because it is included in this release. Add a backported patch to fix compiling with musl. Changelog: 2.4: https://github.com/dovecot/core/releases/tag/2.4.0 2.4.1: https://github.com/dovecot/core/releases/tag/2.4.1 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* gnuplot: upgrade 5.4.3 -> 6.0.3Gyorgy Sarvari2025-10-064-78/+170
| | | | | | | | | | | | | | | | | | | | | This upgrade includes fixes for the following vulnerabilities: CVE-2025-31176 CVE-2025-31178 CVE-2025-31179 CVE-2025-31180 CVE-2025-31181 This release supports qt4, qt5 and qt6 (the last one is new in this release). There are 2 qt PACKAGECONFIGs now: qt5 and qt6 - they are mutually exclusive. Since it is being touched, also fix lua PACKAGECONFIG, which requires lua-native at build time. Changelog: http://gnuplot.info/ReleaseNotes_6_0_3.html Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libavif: upgrade 1.0.1 -> 1.3.0Gyorgy Sarvari2025-10-062-15/+16
| | | | | | | | | | | | This upgrade contains fixes for CVE-2025-48174 and CVE-2025-48175. Changelog: https://github.com/AOMediaCodec/libavif/blob/v1.3.0/CHANGELOG.md Libyuv support is currently disabled, because its dependency (libyuv) is not provided by neither oe-core nor meta-oe. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* jasper: upgrade 4.2.4 -> 4.2.8Gyorgy Sarvari2025-10-061-3/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | The upgrade contains fixes for the following vulenrabilities: CVE-2025-8835, CVE-2025-8836, CVE-2025-8837 Changelog: 4.2.8: Fixed a bug in the JPC decoder that could cause bad memory accesses if the debug level is set sufficiently high. 4.2.7: Added some missing range checking on several coding parameters in the JPC encoder. 4.2.6: Added a check for a missing color component in the jas_image_chclrspc function. Fixed a minor build problem related to the use of -Wstrict-prototypes with Clang. 4.2.5: Made a change to a configuration header file in order to avoid undesirable compiler warnings when JasPer is used in C++ code Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* iperf2: ignore irrelevant CVEsGyorgy Sarvari2025-10-061-0/+3
| | | | | | | | | These CVEs are for iperf3 - which is a similar application in its goals (and name), but an independent project from this, and the projects are independent implementations also, they share no common code. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* imagemagick: upgrade 7.1.1-43 -> 7.1.2-5Gyorgy Sarvari2025-10-061-3/+2
| | | | | | | | | | | | | This release contains fixes for the following vulnerabilities: CVE-2025-53014, CVE-2025-53015, CVE-2025-53019, CVE-2025-53101, CVE-2025-55004, CVE-2025-55005, CVE-2025-55154, CVE-2025-55160, CVE-2025-55212, CVE-2025-55298, CVE-2025-57803, CVE-2025-57807 Also remove jp2 PACKAGECONFIG: it was superseded by openjpeg PACKAGECONFIG, which also provides jpeg 2000 support. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* hdf5: upgrade 1.14.4-3 -> 1.14.6Gyorgy Sarvari2025-10-062-5/+5
| | | | | | | | | | | | This upgrade contains fixes for the following vulnerabilities: CVE-2025-2912, CVE-2025-2913, CVE-2025-2914, CVE-2025-2915, CVE-2025-2923, CVE-2025-2924, CVE-2025-2925, CVE-2025-2926, CVE-2025-6269, CVE-2025-6270, CVE-2025-6516 Changelog: https://github.com/HDFGroup/hdf5/blob/hdf5_1_14_6/release_docs/RELEASE.txt Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-odfpy: New recipe for version 1.4.1Zoltán Böszörményi2025-10-062-0/+46
| | | | | | | | | | It's an optional dependency for pandas to provide ODS reader and writer support. It complements spreadsheet support along with python3-xlrd and python3-openpyxl, both of which are part of meta-python already. Signed-off-by: Zoltán Böszörményi <zboszor@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-pint: Upgrade 0.24.4 -> 0.25Leon Anavi2025-10-061-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Upgrade to release 0.25: - Bump minimum Python version to 3.11 - Upgrade code to Python 3.11 - Move to pixi/uv/ruff - Refactor compat to make it easier to test - Implemented several pixi environment and tasks to simplify development - Add docs to the functions in pint.testing - Fix round function returning float instead of int - Fix return type of PlainQuantity.to - Update constants to CODATA 2022 recommended values - Fixed issue with .to_compact and Magnitudes with uncertainties / Quantities with units - Fixed issue in unit conversion which led to loss of precision when using decimal - Add conductivity dimension - Add absorbance unit and dimension - Add membrane filtration flux and permeability dimensionality, and shorthand "LMH" - Fix find_shortest_path to use breadth first search - Fix typo in pyproject.toml: rename AS_MIP to HAS_MIP so that MIP support is correctly detected - Fix handling of extra arguments in conversion with enabled contexts - Fix swapped left and right arguments in interp - Fix formatted scientific notation bug in Python 3.13 - Fix ability to add dB units, and to add dB (dimensionless) to referenced dB units, such as dBm or dBW - Improve pressure unit definitions in default definition file - Avoid and document known issues with MIP during install, testing and runtime - Fix issue with Dask by restricting its version to < 2025.3.0 - Skip false xfail tests linked to a known numpy issue - Improve Contributing documentation - Add Quantity.to_unprefixed` and `ito_unprefixed methods that remove SI prefixes without converting to base units Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-moteus: Upgrade 0.3.90 -> 0.3.92Leon Anavi2025-10-061-1/+1
| | | | | | | | | | Upgrade to release 0.3.92: - Implement servo.inertia_feedforward for calculating a feedforward term based on the control acceleration Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-aiohue: Upgrade 4.7.5 -> 4.8.0Leon Anavi2025-10-061-1/+1
| | | | | | | | | | | | Upgrade to release 4.8.0: - Drop tomli in pyproject.toml - Add scene status (active + last_recall) fields - Update various models - Add a few missing models to complete MotionAware Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-yarl: Upgrade 1.20.1 -> 1.21.0Leon Anavi2025-10-061-1/+1
| | | | | | | | | | | | | Upgrade to release 1.21.0: - The reusable-cibuildwheel.yml workflow has been refactored to be more generic and ci-cd.yml now holds all the configuration toggles - When building wheels, the source distribution is now passed directly to the cibuildwheel invocation - Added CI for Python 3.14 Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* opencl-benchmark: package NVIDIA OpenCL benchmarkDmitry Baryshkov2025-10-061-0/+27
| | | | | | | | Add recipe to build a small OpenCL benchmark program to measure peak GPU/CPU performance. Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@oss.qualcomm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* exiv2: upgrade 0.28.3 -> 0.28.7Gyorgy Sarvari2025-10-061-2/+2
| | | | | | | | | | | This upgrade includes fixes for CVE-2025-26623, CVE-2025-54080 and CVE-2025-55304. Changelog: https://github.com/Exiv2/exiv2/blob/v0.28.7/doc/ChangeLog Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* gimp: ignore CVE-2025-8672Gyorgy Sarvari2025-10-061-1/+1
| | | | | | | | | | The vulnerability only affects MacOS: https://nvd.nist.gov/vuln/detail/CVE-2025-8672 While touching it, also remove an outdated CVE_STATUS, which has been reported against a very old version of the application. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* xfce4-xkb-plugin: upgrade 0.8.2 -> 0.9.0Jason Schonberg2025-10-061-2/+4
| | | | | | | | | | | | License-Change: Previously copyright by Alexander Iliev. Now distributed under GPL 2 Changelog: https://gitlab.xfce.org/panel-plugins/xfce4-xkb-plugin/-/tags/xfce4-xkb-plugin-0.9.0 Changelog: https://gitlab.xfce.org/panel-plugins/xfce4-xkb-plugin/-/tags/xfce4-xkb-plugin-0.8.5 Changelog: https://gitlab.xfce.org/panel-plugins/xfce4-xkb-plugin/-/tags/xfce4-xkb-plugin-0.8.4 Changelog: https://gitlab.xfce.org/panel-plugins/xfce4-xkb-plugin/-/tags/xfce4-xkb-plugin-0.8.3 Signed-off-by: Jason Schonberg <schonm@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* xfce4-wavelan-plugin: upgrade 0.6.3 -> 0.7.0Jason Schonberg2025-10-061-1/+3
| | | | | | | | Changelog: https://gitlab.xfce.org/panel-plugins/xfce4-wavelan-plugin/-/tags/xfce4-wavelan-plugin-0.7.0 Changelog: https://gitlab.xfce.org/panel-plugins/xfce4-wavelan-plugin/-/tags/xfce4-wavelan-plugin-0.6.4 Signed-off-by: Jason Schonberg <schonm@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* xfce4-verve-plugin: upgrade 2.0.3 -> 2.1.0Jason Schonberg2025-10-061-1/+3
| | | | | | | | Changelog: https://gitlab.xfce.org/panel-plugins/xfce4-verve-plugin/-/tags/xfce4-verve-plugin-2.1.0 Changelog: https://gitlab.xfce.org/panel-plugins/xfce4-verve-plugin/-/tags/xfce4-verve-plugin-2.0.4 Signed-off-by: Jason Schonberg <schonm@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* xfce4-timer-plugin: upgrade 1.7.2 -> 1.8.0Jason Schonberg2025-10-061-1/+3
| | | | | | | | Changelog: https://gitlab.xfce.org/panel-plugins/xfce4-timer-plugin/-/tags/xfce4-timer-plugin-1.8.0 Changelog: https://gitlab.xfce.org/panel-plugins/xfce4-timer-plugin/-/tags/xfce4-timer-plugin-1.7.3 Signed-off-by: Jason Schonberg <schonm@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* xfce4-time-out-plugin: upgrade 1.1.4 -> 1.2.0Jason Schonberg2025-10-061-1/+3
| | | | | | | Changelog: https://gitlab.xfce.org/panel-plugins/xfce4-time-out-plugin/-/tags/xfce4-time-out-plugin-1.2.0 Signed-off-by: Jason Schonberg <schonm@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* xfce4-systemload-plugin: upgrade 1.3.2 -> 1.4.0Jason Schonberg2025-10-062-4/+6
| | | | | | | | | | refresh patch. Changelog: https://gitlab.xfce.org/panel-plugins/xfce4-systemload-plugin/-/tags/xfce4-systemload-plugin-1.4.0 Changelog: https://gitlab.xfce.org/panel-plugins/xfce4-systemload-plugin/-/tags/xfce4-systemload-plugin-1.3.3 Signed-off-by: Jason Schonberg <schonm@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* xfce4-smartbookmark-plugin: upgrade 0.5.3 -> 0.6.0Jason Schonberg2025-10-061-1/+3
| | | | | | | Changelog: https://gitlab.xfce.org/panel-plugins/xfce4-smartbookmark-plugin/-/tags/xfce4-smartbookmark-plugin-0.6.0 Signed-off-by: Jason Schonberg <schonm@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* xfce4-pulseaudio-plugin: upgrade 0.4.9 -> 0.5.1Jason Schonberg2025-10-061-1/+6
| | | | | | | | | | | | | | Changelog: https://gitlab.xfce.org/panel-plugins/xfce4-pulseaudio-plugin/-/tags/xfce4-pulseaudio-plugin-0.5.1 Changelog: https://gitlab.xfce.org/panel-plugins/xfce4-pulseaudio-plugin/-/tags/xfce4-pulseaudio-plugin-0.5.0 Add EXTRA_OECONF to resolve configure failure: | checking for glib-compile-resources... configure: error: could not find glib-compile-resources. You can run: | ./configure GLIB_COMPILE_RESOURCES=/path/to/glib-compile-resources | to provide a custom location for it. Signed-off-by: Jason Schonberg <schonm@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* xfce4-places-plugin: upgrade 1.8.4 -> 1.9.0Jason Schonberg2025-10-061-1/+3
| | | | | | | Changelog: https://gitlab.xfce.org/panel-plugins/xfce4-places-plugin/-/tags/xfce4-places-plugin-1.9.0 Signed-off-by: Jason Schonberg <schonm@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* xfce4-netload-plugin: upgrade 1.4.2 -> 1.5.0Jason Schonberg2025-10-061-2/+4
| | | | | | | Changelog: https://gitlab.xfce.org/panel-plugins/xfce4-netload-plugin/-/tags/xfce4-netload-plugin-1.5.0 Signed-off-by: Jason Schonberg <schonm@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* xfce4-diskperf-plugin: upgrade 2.7.0 -> 2.8.0Jason Schonberg2025-10-061-2/+4
| | | | | | | | Changelog: https://gitlab.xfce.org/panel-plugins/xfce4-diskperf-plugin/-/tags/xfce4-diskperf-plugin-2.8.0 Changelog: https://gitlab.xfce.org/panel-plugins/xfce4-diskperf-plugin/-/tags/xfce4-diskperf-plugin-2.7.1 Signed-off-by: Jason Schonberg <schonm@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* xfce4-mount-plugin: upgrade 1.1.5 -> 1.2.0Jason Schonberg2025-10-062-11/+11
| | | | | | | | | | | | | License-Change: checksum change reflectes the change of address of the Free Software Foundation. Patch updated with new offsets where appropariate. Changelog: https://gitlab.xfce.org/panel-plugins/xfce4-mount-plugin/-/tags/xfce4-mount-plugin-1.2.0 Changelog: https://gitlab.xfce.org/panel-plugins/xfce4-mount-plugin/-/tags/xfce4-mount-plugin-1.1.7 Changelog: https://gitlab.xfce.org/panel-plugins/xfce4-mount-plugin/-/tags/xfce4-mount-plugin-1.1.6 Signed-off-by: Jason Schonberg <schonm@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* xfce4-mailwatch-plugin: upgrade 1.3.2 -> 1.4.0Jason Schonberg2025-10-061-1/+3
| | | | | | | Changelog: https://gitlab.xfce.org/panel-plugins/xfce4-mailwatch-plugin/-/tags/xfce4-mailwatch-plugin-1.4.0 Signed-off-by: Jason Schonberg <schonm@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* xfce4-genmon-plugin: upgrade 4.2.1 -> 4.3.0Jason Schonberg2025-10-061-1/+3
| | | | | | | Changelog: https://gitlab.xfce.org/panel-plugins/xfce4-genmon-plugin/-/tags/xfce4-genmon-plugin-4.3.0 Signed-off-by: Jason Schonberg <schonm@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2026-01-31 01:01:38 +0000