summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* libio-compress-perl: upgrade 2.217 -> 2.218Wang Mingyu2026-03-171-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libdaq: upgrade 3.0.23 -> 3.0.25Wang Mingyu2026-03-171-1/+1
| | | | | | | | Changelog: api: update dioctl daqSnort latency common changes Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libcurses-perl: upgrade 1.45 -> 1.46Wang Mingyu2026-03-171-1/+1
| | | | | | | | | Changelog: - Add BUTTON5 constants: BUTTON5_RELEASED, BUTTON5_PRESSED, BUTTON5_CLICKED, BUTTON5_DOUBLE_CLICKED, and BUTTON5_TRIPLE_CLICKED. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libcompress-raw-zlib-perl: upgrade 2.217 -> 2.222Wang Mingyu2026-03-171-2/+2
| | | | | | | | | License-Update: zlib updated to 1.3.2 Copyright year updated to 2026 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libcompress-raw-lzma-perl: upgrade 2.217 -> 2.221Wang Mingyu2026-03-171-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libcompress-raw-bzip2-perl: upgrade 2.217 -> 2.218Wang Mingyu2026-03-171-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* jasper: upgrade 4.2.8 -> 4.2.9Wang Mingyu2026-03-171-1/+1
| | | | | | | | | Changelog: - Fixed a bug in the JP2 encoder that caused incorrect handling of opacity components in some cases. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* imapfilter: upgrade 2.8.3 -> 2.8.5Wang Mingyu2026-03-171-2/+2
| | | | | | | License-Update: copyright year updated to 2026. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* imagemagick: upgrade 7.1.2-15 -> 7.1.2-16Wang Mingyu2026-03-171-1/+1
| | | | | | | | | | | | | | | | | | Changelog: =========== * client: Fix use-after-free when creating async proxy failed * daemon: Fix race on subscribers list when on thread * ftp: Validate fe_size when parsing symlink target * ftp: Check localtime() return value before use * CVE-2026-28295: ftp: Use control connection address for PASV data * CVE-2026-28296: ftp: Reject paths containing CR/LF characters * gphoto2: Use g_try_realloc() instead of g_realloc() * cdda: Reject path traversal in mount URI host * client: Fail when URI has invalid UTF-8 chars * Some other fixes Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* graphviz: upgrade 14.1.2 -> 14.1.3Wang Mingyu2026-03-171-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | ### Changed -------------- - Using long node names in combination with the fdp layout algorithm no longer results in truncated generated names. - Vertical centering of text within HTML-like table cells has been improved. - The existing ability to provide a numeric parameter to '-v' to specify verbosity level are newly documented in 'dot --help'. ### Fixed ------------ - 'gvmap' no longer dereferences a null pointer when reading position-less graphs. - 'gvmap' no longer crashes when adding coordinate data. - 'mm2gv' no longer accepts input matrices with non-'real' element type. Previously these would be accepted but processed incorrectly leading to out-of-bounds memory reads and writes. - The 'Tcldot_Init', 'Tcldot_builtin_Init', and 'Tcldot_SafeInit' symbols in 'tcldot.dll' are externally visible on Windows. #2809 - The 'Tclpathplan_Init' and 'Tclpathplan_SafeInit' symbols in 'tclpathplan.dll' are externally visible on Windows. #2809 - The Autotools build system more consistently uses '$PYTHON3' instead of 'python3' when invoking Python. This ensures developers are more easily able to control the Python installation in use from the top level. - The Autotools build system explicitly links against libglu libraries when linking against libglut. - Corrected time formatting in verbose info/debug messages (enabled by -v). Previously, minutes was missing, showing HH:SS instead of HH:MM:SS. - Further parts of the network simplex algorithm have been rewritten in a non-recursive style. This allows processing larger graphs that previously caused stack overflows. #2782 - Canonicalizing an empty string or a string entirely made up of characters needing escaping no longer triggers an out-of-bounds memory write. This was a regression in Graphviz 13.0.1. #2743 - An off-by-one error in the network simplex algorithm has been corrected. This could have led to suboptimal layout in some edge cases. This was a regression in Graphviz 13.0.0. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* gperftools: upgrade 2.18 -> 2.18.1Wang Mingyu2026-03-171-1/+1
| | | | | | | | Changelog: fix for compilation failure on PPC. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* glaze: upgrade 7.0.2 -> 7.1.1Wang Mingyu2026-03-171-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* driverctl: upgrade 0.115 -> 0.121Wang Mingyu2026-03-171-2/+2
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ctags: upgrade 6.2.20260222.0 -> 6.2.20260308.0Wang Mingyu2026-03-171-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* castxml: upgrade 0.6.13 -> 0.7.0Wang Mingyu2026-03-171-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-snagboot: enable building -native and nativesdk- variantsRasmus Villemoes2026-03-171-0/+2
| | | | | | | | | | It can be useful to include snagboot in the SDK, so allow building that variant. While I don't see a use case for it during build, there's no reason not to also allow building the -native variant while at it. Signed-off-by: Rasmus Villemoes <ravi@prevas.dk> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tnftp: Add HOMEPAGELiu Yiding2026-03-171-0/+1
| | | | | Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tmux: upgrade 3.6 -> 3.6aLiu Yiding2026-03-171-2/+2
| | | | | | | | | | 1. Change log: https://raw.githubusercontent.com/tmux/tmux/3.6a/CHANGES 2. Change HOMEPAGE to github. Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libssh: upgrade 0.11.3 -> 0.11.4Gijs Peskens2026-03-171-1/+1
| | | | | Signed-off-by: Gijs Peskens <gijs.peskens@munisense.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-scikit-build: Upgrade 0.18.1->0.19.0Jiaying Song2026-03-171-1/+1
| | | | | | | | Changelog: https://scikit-build.readthedocs.io/en/latest/history.html Signed-off-by: Jiaying Song <jiaying.song.cn@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mypaint-brushes: add recipe for v2Markus Volk2026-03-171-0/+10
| | | | | | | This recipe is required to build the upcoming gimp-3.2.0 update Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* gtkmm4: add x11 back to REQUIRED_DISTRO_FEATURESChangqing Li2026-03-171-1/+1
| | | | | | | | | | | | x11 is moved in comit [1], but when DISTRO_FEATURES contains opengl, but not contains x11, bitbake gtkmm4 reports: ERROR: Nothing PROVIDES 'atkmm' (but /build/layers/meta-openembedded/meta-oe/recipes-gnome/gtk+/gtkmm4_4.20.0.bb DEPENDS on or otherwise requires it) atkmm was skipped: one of 'wayland x11' needs to be in DISTRO_FEATURES [1] https://git.openembedded.org/meta-openembedded/commit/?id=2cd317e9551492a64fddf2fb535333eb7e3f7fef Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* thermald: backport support for non-Intel platformsPriyansh Jain2026-03-174-1/+1108
| | | | | | | | | | | | | | | | | | Backport three upstream patches that refactor thermald to support non-Intel architectures, including ARM platforms. These commits were merged upstream after the 2.5.11 release and are required to enable correct thermal management on non-x86 SoCs. Also update COMPATIBLE_HOST to allow building thermald on both Intel and ARM hosts. Upstream patches: - Backport from commit 4cf42fc89ccdbcecdcd30b32a7ca8040be55c253 - Backport from commit 857fbdf3e9079cec04bfa5fe7a93a432485b5cab - Backport from commit 1931a12e7e44b6b85a02a5d8158829eff4b9cc92 Signed-off-by: Priyansh Jain <priyansh.jain@oss.qualcomm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* atop: upgrade 2.12.0 -> 2.12.1Liu Yiding2026-03-171-1/+1
| | | | | | | | Version 2.12.1 Bug solution: tests during append of existing raw log are less strict now. Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* bit7z: upgrade 4.0.9 -> 4.0.11Liu Yiding2026-03-177-255/+49
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 1. Changelog: https://github.com/rikyoz/bit7z/releases/tag/v4.0.11 2. Drop following patches as they were merged upstream. 0001-Fix-reinterpret-cast-compiler-errors.patch 0001-Fix-int8_t-storage-in-BitPropVariant-on-Arm-architec.patch 0001-Allow-running-tests-on-target-when-cross-compiling.patch 0001-Allow-specifying-path-to-7z-library-in-tests.patch 0001-Fix-tests-with-musl.patch 3. Adjust Ptest SRCREV to adopt to latest bit7z SRCREV_filesystem refer to bit7z-4.0.11/cmake/Dependencies.cmake SRCREV_catch2 refer to bit7z-4.0.11/tests/CMakeLists.txt SRCHASH_CPM and TAG_CPM refer to bit7z-4.0.11/cmake/Dependencies.cmake 4.cmake/Dependencies.cmake has redefined to check and download CPM_${CPM_DOWNLOAD_VERSION}.cmake file to CPM_SOURCE_CACHE, so it will show error in do_configure as ./build/cpm_cache/cpm/CPM_0.42.0.cmake is empty | -- Downloading CPM.cmake to ...bit7z/4.0.11/build/cpm_cache/cpm/CPM_0.42.0.cmake | CMake Error at cmake/Dependencies.cmake:15 (file): | file DOWNLOAD cannot compute hash on failed download | | from url: "https://github.com/cpm-cmake/CPM.cmake/releases/download/v0.42.0/CPM.cmake" | status: [6;"Could not resolve hostname"] So change ${B}/cmake to ${B}/cpm_cache/cpm/ to fix this issue. ./build/cpm_cache/cpm/CPM_0.42.0.cmake 5. Add 0001-cmake-disable-filesystem-gitclone.patch to fix filesystem git clone error Fix error log as following: | fatal: unable to access 'https://github.com/rikyoz/filesystem.git/': Could not resolve host: github.com | Had to git clone more than once: 3 times. | CMake Error at bit7z/4.0.11/build/_deps/ghc_filesystem-subbuild/ghc_filesystem-populate-prefix/tmp/ghc_filesystem-populate-gitclone.cmake:50 (message): | Failed to clone repository: 'https://github.com/rikyoz/filesystem.git' Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* thunar-plugin.bbclass: add x11 to REQUIRED_DISTRO_FEATURESChangqing Li2026-03-171-3/+1
| | | | | | | thunar requires x11 Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* thunar: add x11 to REQUIRED_DISTRO_FEATURESChangqing Li2026-03-171-3/+1
| | | | | | | thunar depends on xfce4-panel, xfce4-panel requires x11 Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* gtk-vnc: add x11 to REQUIRED_DISTRO_FEATURESChangqing Li2026-03-171-1/+1
| | | | | | | | | Fix world build failure: ERROR: Nothing PROVIDES 'libx11' (but /build/layers/meta-openembedded/meta-gnome/recipes-connectivity/gtk-vnc/gtk-vnc_1.5.0.bb DEPENDS on or otherwise requires it) libx11 was skipped: using DISTRO 'poky', which is missing required DISTRO_FEATURES: 'x11' Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libxfce4ui: update REQUIRED_DISTRO_FEATURESChangqing Li2026-03-171-1/+2
| | | | | | | | | | | | Refer [1], when DISTRO_FEATURES contains opengl, but not x11, world build will report: ERROR: Nothing PROVIDES 'libice' (but /build/layers/meta-openembedded/meta-xfce/recipes-xfce/libxfce4ui/libxfce4ui_4.20.2.bb DEPENDS on or otherwise requires it) libice was skipped: using DISTRO 'poky', which is missing required DISTRO_FEATURES: 'x11' [1] https://git.openembedded.org/meta-openembedded/commit/?id=bd206048b6fabe22a67058aaf250a28d00d92135 Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* xfce4-panel: add x11 to REQUIRED_DISTRO_FEATURESChangqing Li2026-03-171-3/+1
| | | | | | | xfce4-panel depends on libwnck3, which only support x11 Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* xfce4-pulseaudio-plugin: require x11 distro featureChangqing Li2026-03-171-1/+1
| | | | | | | | | | | | | | When DISTRO_FEATURES contains pulseaudio, but not x11, world build will report error: pavucontrol was skipped: using DISTRO 'poky', which is missing required DISTRO_FEATURES: 'x11' Missing or unbuildable dependency chain was: ['meta-world-pkgdata', 'xfce4-pulseaudio-plugin', 'pavucontrol'] Refer [1], conditionally add x11 to REQUIRED_DISTRO_FEATURES [1] https://git.openembedded.org/meta-openembedded/commit/?id=3a57e5274540a2b4b6d6a1d9808d0c9783f250a7 Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* gimp: add x11 to REQUIRED_DISTRO_FEATURESChangqing Li2026-03-171-0/+2
| | | | | | | | | | When DISTRO_FEATURES only contains wayland, but not x11, world build will report: ERROR: Nothing PROVIDES 'libxmu' (but /build/layers/meta-openembedded/meta-gnome/recipes-gimp/gimp/gimp_3.0.8.bb DEPENDS on or otherwise requires it) libxmu was skipped: using DISTRO 'poky', which is missing required DISTRO_FEATURES: 'x11' Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libwnck3: add x11 to REQUIRED_DISTRO_FEATURESChangqing Li2026-03-171-3/+1
| | | | | | | | | | | | | | Refer [1], but when DISTRO_FEATURES only container wayland, but not x11, do_configure will failed with error: | ../sources/libwnck-43.2/meson.build:55:8: ERROR: Dependency "x11" not found, tried pkgconfig | ERROR: meson setup failed Besides, refer the following source code, seems libwnck3 only support x11. libwnck/util.c:248: g_warning ("libwnck is designed to work in X11 only, no valid display found"); [1] https://git.openembedded.org/meta-openembedded/commit/?id=abdb05b6b4b31ff40c4219336b7096db014284f1 Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* uutils-coreutils: upgrade 0.6.0 -> 0.7.0Deepesh Varatharajan2026-03-172-171/+161
| | | | | | | | | | | Release notes: https://github.com/uutils/coreutils/releases/tag/0.7.0 Changes are here: https://github.com/uutils/coreutils/compare/0.6.0...0.7.0 Signed-off-by: Deepesh Varatharajan <Deepesh.Varatharajan@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* modemmanager: fix EXTRA_OEMESONAnuj Mittal2026-03-171-2/+1
| | | | | | | | Do not pass qrtr=false explicitly since recipe enables or disables it based on the PACKAGECONFIG value. Also, use += with EXTRA_OEMESON. Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-websocket-client: Upgrade 1.70 -> 1.9.0Ryan Eatmon2026-03-171-2/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | Upgrade to release 1.9.0: - 1.9.0 - Remove Python 3.8 support (EOL), add Python 3.13 (5f25030) - Remove localhost and 127.0.0.1 from default NO_PROXY list (#994) - Support IPv6 CIDRs in the no_proxy option (#1033) - Fix thread safety condition in `teardown()` to improve `run_forever()` (#1015) - Fix #1024 by chunking data, recursion in on_error callback, thread leak in `_stop_ping_thread()`, avoid implicit None in `recv()` (#1036) - Avoid bare except clauses for better error handling (#1036) - Fix async (#983) - Resolve mypy type errors (#996, #1006, 813d570) - Test coverage improvements (#1035, #1036) - flake8 linting improvements (#1034) - 1.8.0 - Added `on_reconnect` parameter to WebSocketApp to handle callback ambiguity (#972) - Improve handling of SSLEOFError and use reconnect bool (#961) - Minor linting and docs CI build upgrades (981c00e, 75ba91a, bec2608) License-Update: copyright years refreshed Signed-off-by: Ryan Eatmon <reatmon@ti.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-redis: upgrade 5.2.1 -> 5.3.1Liu Yiding2026-03-171-1/+1
| | | | | | | Allow newer PyJWT versions for branch 5.3 Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-xmodem: upgrade 0.4.7 -> 0.5.0Liu Yiding2026-03-171-2/+2
| | | | | | | | | bugfix: retry_limit was never actually triggered during the data transfer phase because errors never accumulated, and enhancement: replace 3x getc() calls with a single recv() call, reducing timing and failed packets when using fast serial lines without flow control. Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* spdm-emu: add recipe for SPDM emulatorJino Abraham2026-03-171-0/+75
| | | | | | | | | | | SPDM emulator implementation based on libspdm. It provides requester and responder tools used for testing SPDM protocol communication. Upstream: https://github.com/DMTF/spdm-emu Signed-off-by: Jino Abraham <jinoabraham26@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* grpc: upgrade 1.76.0 -> 1.78.1Andrej Kozemcak2026-03-172-61/+2
| | | | | | | | | | | | | | | | | | Removed patch included in this release Changelogs v1.78.1: https://github.com/grpc/grpc/releases/tag/v1.78.1 v1.78.0: https://github.com/grpc/grpc/releases/tag/v1.78.0 C++: - adding address_sorting dep in naming test build Signed-off-by: Andrej Kozemcak <andrej.kozemcak@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* zchunk: upgrade 1.5.2 -> 1.5.3Andrej Kozemcak2026-03-171-2/+2
| | | | | | | | | | | | | | | | The tag is not on any branch. Add tag to SRC_URI. Changelog: https://github.com/zchunk/zchunk/compare/1.5.2...1.5.3 Changes: - update to 1.5.3 - rename internal close() functions to close_zck_component to avoid POSIX conflict on AIX Signed-off-by: Andrej Kozemcak <andrej.kozemcak@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libmodbus: upgrade 3.1.11 -> 3.1.12Andrej Kozemcak2026-03-171-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | Add 'tag' to SRC_URI Changelog: https://github.com/stephane/libmodbus/releases/tag/v3.1.12 Changes: - Fix FD_SET overflow when socket fd >= FD_SETSIZE. - Check dest pointer not null and nb in read functions. - NULL check for src and nb < 1 validation in write functions. - modbus_reply: don't compute address for FC 0x07/0x11. - Use O_NONBLOCK instead of deprecated O_NDELAY - Explicit cast for Coverity CID 416366. - Document required buffer size of modbus_receive. - Document macros for error codes corresponding to Modbus exceptions - Fix example of modbus_rtu_set_serial_mode - Test filesystem provides symlink in autogen.sh - Sync API signatures with the documentation. - Many documentation fixes and typo corrections. - Add coverage target and helper script. Signed-off-by: Andrej Kozemcak <andrej.kozemcak@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* syslog-ng: upgrade 4.10.2 -> 4.11.0Andrej Kozemcak2026-03-171-1/+1
| | | | | | | | | | | Changelog: https://github.com/syslog-ng/syslog-ng/releases/tag/syslog-ng-4.11.0 Highlights - kafka-source(): The new kafka() source can directly fetch log messages from the Apache Kafka message bus using the librdkafka client. Signed-off-by: Andrej Kozemcak <andrej.kozemcak@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* squid: upgrade 7.3 -> 7.4Andrej Kozemcak2026-03-172-24/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | License-Update: update GPLv2 COPYING document Some terminology and FSF address changes since the GPLv2 https://github.com/squid-cache/squid/commit/4c5fbc7e8db25352722de4ebe7fe1cab904b62b6 Remove lines from patch, which modify not exist code. Changelog: https://github.com/squid-cache/squid/releases/tag/SQUID_7_4 Changes: - Do not create world-readable directories - digest_edirectory_auth: Fix LDAPS memory leaks - snmplib: Improve handling of zero-length ASN OCTET STRINGs - Debug tls_read_method()/tls_write_method() errors - ICMP: Harden echo paths, fix overflows, UB, and leaks - Set SSL_OP_LEGACY_SERVER_CONNECT when peeking at servers - security_file_certgen: Fix OPENSSL_malloc()/free(3) mismatch - Detect FreeBSD ports Heimdal package - Remove SQUID_CHECK_KRB5_HEIMDAL_BROKEN_KRB5_H macro - Remove SQUID_CHECK_KRB5_SOLARIS_BROKEN_KRB5_H macro - ext_kerberos_ldap_group_acl: Do not prohibit all LDFLAGS - negotiate_sspi_auth: Respond with ERR when FormatMessage() fails - ... and some code cleanups - ... and some CI improvements Signed-off-by: Andrej Kozemcak <andrej.kozemcak@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* poco: upgrade 1.14.2 -> 1.15.0Andrej Kozemcak2026-03-171-3/+7
| | | | | | | | Changelog: https://github.com/pocoproject/poco/releases/tag/poco-1.15.0-release Signed-off-by: Andrej Kozemcak <andrej.kozemcak@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* paho-mqtt-cpp: upgrade 1.5.3 -> 1.6.0Andrej Kozemcak2026-03-171-1/+1
| | | | | | | | | | | | | | | | | | | | | Changelog: https://github.com/eclipse-paho/paho.mqtt.cpp/releases/tag/v1.6.0 Changes: - Bumped Paho C submodule to v1.3.16 and updated directory name to externals/paho.mqtt.c - Some significant performance increases (lower latency) for connect and publish - Fixed topic_matcher and topic_filter to properly match parent with multi-level ('#') wildcard. - Slight optimization of topic_filter to do simple string comparison if the filter does not contain wildcards. - Set a minimum version for Paho C in the CMake file. Report the version found. - .deb version properly set, and add architecture name to .deb file - remove const from connect_options_builder 'move' constructor - fix potential deadlock in thread_queue on capacity increase. - Incorrect default retain value in a will options constructor - prevent undefined behaviour on empty topic matching - Sync reconnect example crashes on first reconnect Signed-off-by: Andrej Kozemcak <andrej.kozemcak@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* paho-mqtt-c: upgrade 1.3.15 -> 1.3.16Andrej Kozemcak2026-03-171-1/+1
| | | | | | | | | | | | | | | Changelog: https://github.com/eclipse-paho/paho.mqtt.c/releases/tag/v1.3.16 Changes: - Bumped minimum CMake to v3.12 - Consolidated "Event" thread signaling object. - Reduce latency on connect #1430 - Fixed warning in Window build for TCP_NODELAY - Added a .clang-format file and bash script to run it Signed-off-by: Andrej Kozemcak <andrej.kozemcak@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libnetfilter-conntrack: upgrade 1.1.0 -> 1.1.1Andrej Kozemcak2026-03-171-1/+1
| | | | | | | | | | | | Changelog: https://git.netfilter.org/libnetfilter_conntrack/log/?h=libnetfilter_conntrack-1.1.1 Changes: - libnetfilter_conntrack: bump version to 1.1.1 - src: add support for CTA_TIMESTAMP_EVENT Signed-off-by: Andrej Kozemcak <andrej.kozemcak@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* jansson: upgrade 2.14.1 -> 2.15.0Andrej Kozemcak2026-03-172-40/+1
| | | | | | | | | | | | | | | | | | | Removed patch included in this release Changelog: https://github.com/akheron/jansson/releases/tag/v2.15.0 Features: - Add support for realloc by adding json_set_alloc_funcs2, json_get_alloc_funcs2 Fixes: - Optimize serializatio - Fix docstrings in hashtable.h Build: - Use target-based cmake settings Signed-off-by: Andrej Kozemcak <andrej.kozemcak@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* fluentbit: upgrade 4.2.2 -> 4.2.3.1Andrej Kozemcak2026-03-171-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The tag is not on any branch. Changelog: https://github.com/fluent/fluent-bit/releases?q=4.2.3.1 Changes: - release: update to 4.2.3 - copyright: update year to 2026 - filter_kubernetes: fix parser annotation leak - github: scripts: commit_linter: Handle bin prefix for fluent-bit.c - bin: Handle CONT signal properly under leaks command - filter_wasm: Handle group metadata - cmake: kafka: fix OAuth Bearer detection on Windows - maintenance: update branch and security EOL info - github: scripts: commit_prefix_check: add config format rules on linter - readme: update active branch 4.2 - out_opentelemetry: on HTTP/2, read and process gRPC status code - config_format: cf_yaml: Align the behavior of dirname against POSIX [Backport to 4.2] - filter_log_to_metrics: fix initialization and exception cleanup - out_stackdriver: clean up oauth2 cache lifecycle - filter_kubernetes: Adjust cleanup ordering to avoid use-after-free [4.2 backport] - in_winevtlog: Add text format for event rendering [Backport to 4.2] - in_tail: Add skipped_lines counter [Backport to 4.2] - in_splunk: Implement handling remote addr feature [Backport to 4.2] - aws: switch AWS Endpoints for European Souvereign Cloud [4.2 backport] - plugin_proxy: enable event_type specification for proxy plugins (4.2 Backport) - in_splunk: Plug memory issues [Backport to 4.2] - dockerfiles: install minimum components and avoiding to use includeRecommended Signed-off-by: Andrej Kozemcak <andrej.kozemcak@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>