1314 Commits
Author SHA1 Message Date
Khem Raj c024e49756 srt: Match SRCREV to tag
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-08-29 21:43:03 -07:00
Jaipaul Cheernam 7fd7419390 pjproject: fix build with OpenSSL 4.0
OpenSSL 4.0 makes ASN1_TIME opaque. Backport upstream fix using
ASN1_TIME_to_tm() API.

Upstream-Status: Backport [https://github.com/pjsip/pjproject/commit/3923fad2e4f6]
Signed-off-by: Jaipaul Cheernam <jaipaul.cheernam@est.tech>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-08-27 23:33:16 -07:00
Ankur Tyagi 3a6c9d995f libsrtp: add UPSTREAM_CHECK_GITTAGREGEX
Fixes:
$ devtool latest-version libsrtp
...
INFO: Current version: 2.8.0
INFO: Latest version: 27
INFO: Latest version's commit: 8ca9b9e50743a9d2192dba5e26183121adb33d46

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-08-27 23:33:12 -07:00
Ankur Tyagi c57de8e1e6 aravis: add UPSTREAM_CHECK variables
Fixes:
$ devtool latest-version aravis
...
INFO: Current version: 0.8.36
INFO: Latest version:

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-08-27 23:33:12 -07:00
Ankur Tyagi 426b417769 srt: upgrade 1.5.6 -> 1.5.7
Changelog:
https://github.com/Haivision/srt/releases/tag/v1.5.7

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-08-27 23:33:11 -07:00
Ankur Tyagi 8b1d948dee ncmpc: upgrade 0.53 -> 0.54
Changelog:
https://github.com/MusicPlayerDaemon/ncmpc/blob/v0.54/NEWS

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-08-27 23:33:11 -07:00
Ankur Tyagi 4997676df4 mpd: upgrade 0.24.13 -> 0.24.14
Changelog:
https://github.com/MusicPlayerDaemon/MPD/blob/v0.24.14/NEWS

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-08-27 23:33:11 -07:00
Ankur Tyagi ec5bbdd370 libmpdclient: upgrade 2.26 -> 2.27
Changelog:
https://github.com/MusicPlayerDaemon/libmpdclient/blob/v2.27/NEWS

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-08-27 23:33:11 -07:00
Ankur Tyagi f0748703d2 libopenmpt: upgrade 0.8.8 -> 0.8.9
Release Note:
https://lib.openmpt.org/libopenmpt/2026/08/19/security-updates-0.8.9-0.7.21-0.6.30-0.5.44-0.4.56/

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-08-27 23:33:11 -07:00
Ankur Tyagi 198b31ca55 libheif: upgrade 1.23.1 -> 1.23.2
Changelog:
https://github.com/strukturag/libheif/releases/tag/v1.23.2

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-08-27 23:33:11 -07:00
Kiruthika Vijayasekar a09474fb9a pipewire: add pw-voiceui SVA voice-UI control/listen client
Add the pw-voiceui tool, a CLI for controlling and monitoring the SVA
(Sound Trigger / Voice Activation) voice-UI PipeWire node exposed by
the pw-pal-plugin (media.role=VoiceUI). Supports list/info/listen,
setting SVA parameters, and sending commands.

Add 0003-tools-add-pw-voiceui-SVA-voice-UI-control-listen-cl.patch,
reference it from SRC_URI, and list pw-voiceui in FILES:${PN}-tools.

Signed-off-by: Kiruthika Vijayasekar <kvijayas@qti.qualcomm.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-08-26 01:43:11 -07:00
Kiruthika Vijayasekar e3212d7860 tinyalsa: fix pcm_ioctl() to dispatch through plugin ops
pcm_ioctl() previously had a FIXME and always issued the ioctl
directly on pcm->fd, bypassing any loaded plugin (e.g. AGM's tinyalsa
plugin). Dispatch through pcm->ops->ioctl when a plugin is loaded,
falling back to the direct ioctl() otherwise.

Add 0002-pcm-fix-pcm_ioctl-to-dispatch-through-plugin-ops.patch and
reference it from SRC_URI.

Signed-off-by: Kiruthika Vijayasekar <kvijayas@qti.qualcomm.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-08-26 01:43:11 -07:00
Ankur Tyagi 4edfc1768d libopenmpt: upgrade 0.8.7 -> 0.8.8
Also add UPSTREAM_CHECK variables to check for new releases.
Fixes:
$ devtool latest-version libopenmpt
...
WARNING: latest_versionstring: package libopenmpt-0.8.7+release.autotools.tar.gz don't match pattern
INFO: Current version: 0.8.7
INFO: Latest version:

Release Notes:
https://lib.openmpt.org/libopenmpt/2026/08/15/releases-0.8.8-0.7.20-0.6.29-0.5.43-0.4.55/

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-08-17 22:32:04 -07:00
Jaipaul Cheernam ea258b20b3 meta-multimedia: fix trailing whitespace
Fix trailing whitespace in meta-multimedia layer.conf to resolve
bitbake parsing warnings.

Signed-off-by: Jaipaul Cheernam <jaipaul.cheernam@est.tech>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-08-17 17:14:24 -07:00
Khem Raj 6f59e8f707 python3-pillow-heif: add python3-wheel-native to DEPENDS
Fixes
ERROR Unmet dependencies (checked against ... recipe-sysroot-native/usr/bin/nativepython3):
	wheel
		wanted: any
		found: not installed

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-08-16 16:32:09 -07:00
Trevor Gamblin 7d2a58c753 meta-multimedia: add bitbake-registry configs for nodistro, poky on master branch
Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-08-14 14:38:23 -07:00
Ankur Tyagi 41c2b1e765 gst-instruments: upgrade 0.3.1 -> 0.3.2
- Dropped setting PV in the recipe and included tag in the SRC_URI.
- Upstream removed ui configuration option[1]

Changelog:
https://github.com/kirushyk/gst-instruments/compare/0.3.1...v0.3.2

[1] https://github.com/kirushyk/gst-instruments/commit/209dc6741159bbca9561df6598d45bbeab8cc2cf

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-08-05 10:16:17 -07:00
Ankur Tyagi 149877fbd9 libdvdcss: upgrade 1.5.0 -> 1.6.0
Changelog:
https://code.videolan.org/videolan/libdvdcss/blob/1.6.0/NEWS?ref_type=tags

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-08-05 10:16:17 -07:00
Khem Raj f3768d3233 librav1e: Drop need for a dependency on libgit2
rav1e's default features include git_version, which pulls built/git2 and thus
libgit2-sys into build.rs -- a *build-dependency*, so it is probed and linked
for the build host.  cargo_common exports LIBGIT2_NO_VENDOR, so libgit2-sys
probes pkg-config, which points at the target sysroot, and the host link then
picks up the target's libm.so linker script.  That script names absolute
target paths (/usr/lib/libm.so.6), which only resolve on the build host when
host and target architectures differ enough for ld to skip the script as
incompatible, so this breaks on aarch64 hosts building aarch64 targets.
git_version only embeds a git hash in the version string, which is
meaningless here, so drop it and keep the rest of the default feature set.

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-08-03 22:57:43 -07:00
Ross Burton 7bf5f6c248 librav1e: add missing libgit2 build dependency
Not sure why an AV1 encoder needs libgit2 but that's rust's dependency
tree for you.  Needed since our cargo class now stops the git2-sys crate
from using a bundled copy of libgit2.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-08-03 16:53:09 -07:00
Ankur Tyagi 34a4496d77 libmodule: update branch in the SRC_URI
Otherwise do_fetch() fails with error:
ERROR: libmodule-5.0.2-r0 do_fetch: Fetcher failure: Unable to find revision b373482a43482459b37bcf601e21846e9c9563d1 in branch master even from upstream
ERROR: libmodule-5.0.2-r0 do_fetch: Bitbake Fetcher Error: FetchError('Unable to fetch URL from any source.', 'git://github.com/FedeDP/libmodule;protocol=https;branch=master;tag=5.0.2')

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-08-02 09:18:04 -07:00
Ankur Tyagi 2a1d19e801 openal-soft: include tag in the SRC_URI
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-08-02 09:18:04 -07:00
Ankur Tyagi f2aad71443 liblc3: include tag in the SRC_URI
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-08-02 09:18:04 -07:00
Ankur Tyagi 117829f76e libmatroska: include tag in the SRC_URI
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-08-02 09:18:03 -07:00
Khem Raj aad68a6567 xdg-desktop-portal-wlr: upgrade 0.8.2 -> 0.8.4
Upstream changes (git log v0.8.2..v0.8.4):
 * screencast: drive the PipeWire graph ourselves; default SelectSources
   to monitors; guard xdpw_pwr_enqueue_buffer() in the PAUSED state; fix
   stream freezing on PipeWire buffer starvation; print an error message
   on the Y-invert flag.

Version-only bump (git tag v0.8.4); recipe unchanged.

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-08-01 11:57:30 -07:00
Khem Raj fffa3eab75 gerbera: upgrade 3.0.0 -> 3.2.1
Upstream changes (release notes):
 * 3.1.0/3.1.1: assorted fixes and code improvements (docker startup
   under the default user, dependency maximum-version bumps).
 * 3.2.0: resolve a long-standing transcoding/error-return issue with
   libpupnp after dropping the old MediaTomb UPnP hack; allow splitting
   config.xml at any section; export/reimport web-UI entries around a
   database clear; many new import/runtime configuration entries.
 * 3.2.1: fix MySQL/PostgreSQL database migration and init with
   ffmpegthumbnailer disabled; raise supported pupnp (1.18.3) and
   jsoncpp (1.9.7) maximums.

New build dependencies in 3.2.x:
 * cxxopts is now required (find_package(cxxopts 3.2.0 REQUIRED)); add it
   to DEPENDS (provided by meta-oe).
 * A new WITH_ZIP option (default ON) pulls in libzippp and libzip for
   "package download". Neither is packaged here, so add a PACKAGECONFIG
   [zip] knob left disabled by default (-DWITH_ZIP=FALSE), matching 3.0.0
   behaviour.

The two local build patches (fmt 12 include fix, <cstring> include) still
apply and are retained.

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-08-01 11:57:30 -07:00
Khem Raj 70dfb6465f srt: upgrade 1.5.4 -> 1.5.6
Upstream changes (git log v1.5.4..v1.5.6):
 * Group/bonding fixes: check value length in group config storage, fix
   deriving string options by a group, fix getting SRTO_RCVBUF/SRTO_SNDBUF
   and rejecting options not allowed on a group, and fix a wrong
   'connection lost' error when sending to a connection-pending group.
 * Fix a stalled connection that should break after rogue NAK/ACK, and a
   misleading listening-socket error message.
 * Build: Windows-on-Arm64 support, fix Windows installers, fix use of
   the OPENSSL_USE_STATIC_LIBS CMake option, deprecation warning for
   Windows+PThreads.

Drop 0002-allow-build-with-cmake-4.patch: it backported the
cmake_minimum_required(VERSION 3.5) bump, which is already present in
1.5.6 upstream.

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-08-01 11:57:30 -07:00
Khem Raj 87f2c31057 tinycompress: upgrade 1.2.13 -> 1.2.16
Upstream changes (git log v1.2.13..v1.2.16):
 * 64-bit timestamp/hpointer support: compress_get_hpointer64,
   get_tstamp64 via SNDRV_COMPRESS_AVAIL64, clamp samples to UINT_MAX and
   return -ERANGE on overflow; update sound header to v0.4.0.
 * compress plugin ("mops") support: magic + compress_plugin_mops symbol
   lookup, improved hw-plugin protocol version check.
 * fcplay: decode the AAC header to set the correct codec format and fix
   next_track sequencing for gapless playback; misc fixes (include
   errno.h, avoid NULL string to printf).
 * include: install compress_ops.h as a public header.

Drop 0001-include-install-compress_ops.h-as-public-header.patch: that
change (moving compress_ops.h to nobase_include_HEADERS) was merged
upstream and is present in 1.2.16.

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-08-01 11:57:29 -07:00
Khem Raj f0c9cab9e3 openal-soft: upgrade 1.24.3 -> 1.25.2
Upstream changes:
 * 1.25.x modernizes the mixer, bundles fmt 11.2.0 (was 11.1.1), and
   annotates realtime-critical functions with [[clang::nonblocking]].

Drop 0001-Add-missing-include-for-malloc-free.patch: it backported a
<cstdlib> include into the bundled fmt-11.1.1 copy, which is already
present in the fmt-11.2.0 now bundled by 1.25.2.

openal-soft hardcodes -Werror=function-effects for C++ even with
ALSOFT_WERROR=OFF. clang-22's function-effects analysis then fails the
build on calls from nonblocking mixer code into non-nonblocking
std::variant::emplace. Pre-seed HAVE_WFUNCTION_EFFECTS=OFF (clang only)
so neither -Wfunction-effects nor its -Werror promotion is added.

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-08-01 11:57:29 -07:00
Khem Raj fdf95268fc nv-codec-headers: upgrade 13.0.19.0 -> 13.1.15.0
Upstream changes (git log):
 * Update headers for NVIDIA Video Codec SDK 13.1.
 * Add the full set of cuMemsetAsync-family functions and other missing
   CUDA functions for Video Codec SDK 13.1 interaction.
 * Load nvEncodeAPI.dll for native Windows ARM64.

Version-only bump (git tag n13.1.15.0); the local clean-target patch
still applies.

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-08-01 11:57:29 -07:00
Khem Raj 7205920b8c fluidsynth: upgrade 2.5.3 -> 2.5.7
Upstream changes (git log v2.5.3..v2.5.7):
 * Security fixes: heap buffer overflow in the MIDI player
   (GHSA-976m-35rw-h3m6), heap overrun in the pitch_bend_range command,
   DLS ptbl/articulation integer overflows (GHSA-r4mc-v3p8-pv47,
   GHSA-hp72-35pr-6h6r), SF2 DMOD unsigned underflow (GHSA-rmc4-c8hw-455w),
   and a heap overrun for DLS samples (GHSA-59ph-rx8r-8p4j).
 * Remove systemd lock-file gating and add automatic shell port
   selection; fix big-endian cpp11 path; fix partially-uninitialized
   fluid_sample and assorted DLS 'pgal'/sample-validation fixes.

Version-only bump of SRCREV_fluidsynth; sub-source SRCREVs unchanged.

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-08-01 11:57:29 -07:00
Khem Raj 1f046fc340 python3-pillow-heif: upgrade 1.1.1 -> 1.5.0
Upstream changes (release notes):
 * 1.2.0: dropped Python 3.9; PREFERRED_DECODER must be a valid decoder.
 * 1.3.0: pixel-aspect-ratio (pasp) read/write; free-threaded (no-GIL)
   Python support; fix integer overflow in the encode path leading to a
   heap OOB read (CVE-2026-28231).
 * 1.4.0: track newer bundled libheif/libde265/libx265 (not used here -
   the recipe builds against the system libraries); minimum libheif
   raised to 1.19.0.
 * 1.5.0: grid (tiled) image encoding via options.GRID_TILE_SIZE /
   tile_size, info["tiling"] read-back, and PH_LIBHEIF_CMAKE_ARGS.

Refresh 0001-setup.py-support-cross-compiling.patch for 1.5.0: setup.py
context shifted, so the patch applied with fuzz and failed the patch-fuzz
QA check. Regenerated against 1.5.0 (same STAGING_INCDIR/STAGING_LIBDIR
changes).

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-08-01 11:57:29 -07:00
Khem Raj fa672e0f91 libdvdread: upgrade 7.0.1 -> 7.1.1
Upstream changes (git log 7.0.1..7.1.1):
 * Large DVD-Audio feature addition: Audio Still Video Set (ASVS) IFO
   structures/reads, still-frame structures in ATS, ifoOpen for ASVS and
   SAMG, simultaneous CSS and CPPM decryption, stream-type logic, and
   audio_sv.vob menu exposure in DVDOpenFile.
 * DVD-VR: add and integrate IFO structures and reads.
 * Prevent library log messages from writing to stdout; add symbol
   visibility attributes for OS/2.

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-08-01 11:57:29 -07:00
Khem Raj 9a5c3f43fd gupnp-tools: upgrade 0.12.2 -> 0.12.4
Upstream changes (NEWS):
 * 0.12.3: translation updates.
 * 0.12.4: bug fixes (GNOME/gupnp-tools#29) and merged MRs !7 and !8.

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-08-01 11:57:28 -07:00
Khem Raj 575122a4a0 gupnp: upgrade 1.6.9 -> 1.6.10
Upstream changes (NEWS):
 * Require GSSDP >= 1.6.5 and reuse its allocated TCP socket for the web
   server.
 * Do not leak a GError in the ACL handler.
 * Fix IPv6 host-header validation.

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-08-01 11:57:28 -07:00
Khem Raj 2292354019 gssdp: upgrade 1.6.4 -> 1.6.6
Upstream changes (NEWS):
 * 1.6.5: block the corresponding TCP socket when allocating a UDP socket.
 * 1.6.6: fix binding to unicast sockets (regression from 1.6.5).

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-08-01 11:57:28 -07:00
Khem Raj 4dcdd5cbff mpd: upgrade 0.24.9 -> 0.24.13
Upstream changes (NEWS):
 * 0.24.10: fix input cache deadlock; sidplay millisecond timestamps and
   libsidplayfp 3 support; allow building the upnp database plugin with
   libupnp 1.14.30 (API breakage fixed upstream).
 * 0.24.11: fix a path-traversal bug and disallow newlines in song URIs;
   curl input requires >= 7.85.0; fix a PCM decoder stack buffer overflow.
 * 0.24.12: allow empty URI in "lsinfo"/"add" (0.24.11 regression).
 * 0.24.13: number-parser range checks; curl storage drops auth probe
   requests; Opus decoder no longer adds 5 dB to header playback gain;
   limit ID3 tags to 4 MB; pipewire fd-leak fix and "media.album" tag;
   allow AF_NETLINK under systemd when UPnP is enabled.

Drop 0001-libfmt-12.2.0-support-use-fmt-format.h-not-fmt-core.h.patch:
0.24.13 already migrated the affected sources off <fmt/core.h>, and this
distro's fmt 12.2.0 still ships the <fmt/core.h> compat header, so the
patch no longer applies cleanly and is unnecessary.

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-08-01 11:57:28 -07:00
Khem Raj 4b033d5349 ncmpc: upgrade 0.49 -> 0.53
Upstream changes (git log v0.49..v0.53):
 * New Interface / PageContainer abstraction; screens migrated to
   Interface::Alert() and ScreenManager::Alert(); removed the obsolete
   global "screen" and the old screen_status library.
 * FileBrowserPage now formats its prompt with libfmt; charset cleanups
   (drop Utf8ToLocaleZ).
 * TextInputDialog reworked (options struct, KEY_RETURN/LINEFEED
   forwarding in "fragile" mode, history handling).
 * Bundled fmt subproject updated (11.0.2); translation updates.

ncmpc 0.53 now formats strings with libfmt and its meson build pulls fmt
as a subproject; with wrap downloads disabled the build failed with
"Subproject fmt is buildable: NO". Add fmt to DEPENDS so the system
libfmt is used instead of the meson wrap.

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-08-01 11:57:28 -07:00
Khem Raj 600204405c gst-shark: upgrade 0.8.1 -> 0.9.1
Upstream changes (git log v0.8.1..v0.9.1):
 * Add base classes to the core shark library.
 * Add an option for subclasses to disable CTF init (enabled by default).
 * Add start/stop monitoring virtual methods to the periodic tracer.
 * Move add-metadata to run after CTF initialization; use absolute paths
   in the graphics script.

0.9.1's configure.ac declares AC_INIT([GstShark], [0.9.1.1], ...) - a
nonzero "nano" component, which gst-shark's own AS_NANO/AG_GST_SET_ERROR_
CFLAGS convention treats as a git/prerelease build and therefore enables
-Werror. That turns gstinterlatency.c's use of the now-deprecated
gst_structure_{id_get,new_id,get_name_id} (superseded by *_id_str
variants in this distro's newer GStreamer core) into hard build
failures. Pass --disable-fatal-warnings to keep these as warnings, same
as a real release build would get.

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-08-01 11:57:28 -07:00
Khem Raj 41619e7ac4 libsrtp: upgrade 2.7.0 -> 2.8.0
Upstream changes (CHANGES, 2.8.0):
 * Backport cryptex support to the v2 branch (#778).
 * Fix AES-192 KDF (#770).
 * Properly support the null-crypto and null-auth scenario (#760).

Version-only bump (git tag v2.8.0); recipe unchanged.

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-08-01 11:57:27 -07:00
Khem Raj d98bc95961 libupnp: upgrade 1.14.25 -> 1.14.31
Upstream changes (ChangeLog):
 * 1.14.31: fix for CVE-2026-41682.
 * 1.14.30: revert an inadvertent API change (25d4bd0b).
 * 1.14.29: CMake builds from the release tarball now work.
 * 1.14.26-28: SONAME/CMake build fixes and assorted portability fixes
   (e.g. OmniOS POSIX asctime_r).

Version-only bump (git tag release-1.14.31); recipe unchanged.

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-08-01 11:57:27 -07:00
Khem Raj ed7427b8b1 liblc3: upgrade 1.0.4 -> 1.1.3
Upstream changes (git log v1.0.4..v1.1.3):
 * Major new feature: LC3plus and LC3plus High-Resolution mode, including
   2.5 ms and 5 ms frame durations, asymmetric stereo frame sizes,
   half-bitrate fallback, and updated C++/Python wrappers.
 * Build: switch to a shared-object library, hidden GNU visibility and
   LTO; add a Python library wrapper.
 * Fixes: crash with NaN/infinite PCM input under fast-math; wrong gain
   offset at high-bitrate/high-resolution 48 kHz; TNS quantization
   adjustments required for LC3plus HR; conformance reports added.

Version-only bump (git tag v1.1.3); recipe unchanged and packaging
verified with the new shared library layout.

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-08-01 11:57:27 -07:00
Khem Raj ca912668df libavif: upgrade 1.4.1 -> 1.4.2
Upstream changes (CHANGELOG.md, 1.4.2):
 * Require C11 for compilation (public headers remain C99).
 * avifgainmaputil: add --jobs flag for multi-threaded read/write and
   enable auto tiling; use AOM_TUNE_IQ for layered inter-frame encoding.
 * Fix memory leak of altICC on early return; avoid MT loop-restoration
   crash with libaom < 3.13.3; fix decoding of layered images with
   multiple scaled alpha layers; fix NaN bypass of AVIF_CLAMP in gain-map
   tone mapping; fix NULL deref in avifImageCopy().
 * Refreshed bundled dependency pins (aom v3.14.1, libyuv, libpng 1.6.58,
   etc.) - not used here; the recipe fetches libargparse/libyuv at their
   own pinned SRCREVs.

Version-only bump of SRCREV_libavif; sub-source SRCREVs unchanged.

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-08-01 11:57:27 -07:00
Khem Raj 99ca84156d libde265: upgrade 1.0.18 -> 1.0.19
Upstream changes (release notes):
 * 1.0.19: security and edge-case correctness fixes - heap-buffer-overflow
   read in decode_slice_unit_tiles() from unvalidated PPS tile geometry
   (CVE-2026-45382) and heap OOB read in decode_slice_unit_WPP() via an
   out-of-bounds CtbAddrRStoTS access (CVE-2026-45383); dec265 SDL fixes
   for 4:4:4 streams and mid-stream resolution changes. ABI compatible
   with 1.0.18.

Not upgraded to 1.1.x: 1.1.0 reworked the x86 SIMD path to dispatch at
runtime via __builtin_cpu_supports(), which reads the compiler-rt global
__cpu_model. Under this distro's clang/lld toolchain, linking the shared
library then fails with

  R_X86_64_PC32 cannot be used against symbol '__cpu_model'; recompile with -fPIC

because clang emits a direct PC-relative access to that exported,
preemptible symbol. Building the objects -fPIC, -Bsymbolic,
--exclude-libs, -fno-direct-access-external-data and a version script
localizing __cpu_model were all tried without success (lld validates the
relocation before applying the localization). 1.0.19 stays on the
compile-time SSE path and builds cleanly, so it is the latest buildable
release here.

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-08-01 11:57:27 -07:00
Khem Raj 69d615b17a aom: upgrade 3.13.1 -> 3.14.1
Upstream changes (CHANGELOG):
 * 3.14.0: significant compression-efficiency and perceptual-quality
   improvements for layered image encoding; AOM_TUNE_IQ and
   AOM_TUNE_SSIMULACRA2 now work with inter-frame (good-quality and
   realtime) modes; Variance Boost (deltaq-mode 6) extended. New
   experimental controls AV1E_SET_EXTERNAL_RATE_CONTROL and
   AV1E_GET_GOP_INFO. The in-tree "build" directory was removed and
   build/cmake moved up one level to cmake/; AOMYV12/AOMI420 img fmts
   deprecated. ABI compatible.
 * 3.14.1: bug fixes - NULL deref in validate_img() with 10-bit
   monochrome input; enlarge cx_data buffer to 2.5x uncompressed frame
   size (oss-fuzz). ABI compatible.

Drop both local patches, now upstream in 3.14.1:
 * 0001-subpel_variance_neon-Provide-prototypes-for-missing-.patch -
   3.14.1's subpel_variance_neon.c includes subpel_variance_neon.h which
   declares the previously-implicit prototypes.
 * 0001-cmake-fix-nasm-detection-w-3.0.patch - the "-hO" nasm-3.0
   detection fix is present in cmake/aom_optimization.cmake (the cmake
   dir also moved out of build/ this cycle).

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-08-01 11:57:27 -07:00
Khem Raj ce2a27d67c libmpdclient: upgrade 2.24 -> 2.26
Upstream changes (NEWS):
 * 2.26: fix a NULL pointer dereference in mpd_song_dup() (2.25
   regression).
 * 2.25: support MPD protocol 0.25 (song properties "RealUri",
   "start_ms", "end_ms"; tag "DiscSubtitle"); switch to C11; fix typos
   in MPD_STICKER_SORT_UNKNOWN.

Version-only bump (git tag v2.26); no recipe/packaging changes needed.

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-08-01 11:57:27 -07:00
Khem Raj 0392f862a7 svt-av1: upgrade 4.1.0 -> 4.2.0
Upstream changes (CHANGELOG.md, 4.2.0):
 * VOD/RA: new TUNE-VMAF mode (~15% VMAF BD-rate gain), single-thread RA
   mode, RA preset/bitrate tuning for M3-M5, raw OBU output as an
   alternative to IVF, and initial_display_delay signalling to fix A/V
   sync on seek. New CLI options --cqp, --enable-intrabc, --hbd-mds,
   --enable-kf-tf.
 * RTC/low-delay: CBR rate control with Kalman-filter QP estimation,
   cyclic refresh and frame re-encode; on-the-fly MG size/preset/bitrate/
   frame-rate changes; reference-frame management API with LTR;
   --max-intra-bitrate-pct / --max-inter-bitrate-pct.
 * General: entropy-coding refactor, CDEF/MD/ME optimizations, optimized
   screen-content detection and TPL dispatch.

Version-only bump (git tag v4.2.0); no recipe/packaging changes needed.

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-08-01 11:57:26 -07:00
Khem Raj 9c05bf41b8 libmodule: upgrade 5.0.1 -> 5.0.2
The only upstream change between 5.0.1 and 5.0.2 is a single commit,
"chore: bump min cmake version to 3.5.", needed for CMake 4+.

Drop 0001-Update-cmake_minimum_required-to-3.5.patch, which backported
exactly that change and is now redundant.

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-08-01 11:57:26 -07:00
Khem Raj 74ef26d0ec libmatroska: upgrade 1.7.1 -> 1.7.2
Upstream changes (NEWS.md):
 * Disallow infinite sizes on all Master elements except Segment+Cluster
   and restrict KaxSeekId to 4 bytes, per RFC 9559.
 * KaxBlock releases read buffers on EndOfStream error; catch some
   internal allocation failures.
 * Deprecate KaxTrackMinCache/KaxTrackMaxCache and KaxTrackOverlay
   (per RFC 9559); add missing MatroskaChapProcessCodecID enum and
   MATROSKA_CHAPTERSKIPTYPE_INTERMISSION.
 * Fix MATROSKA_VIDEO_FIELDORDER_{TOP,BOTTOM}FIELDSWAPPED values.
 * [API break] remove MatroskaChapterTranslateCodec /
   MatroskaTrackTranslateCodec.
 * Fix includes not implicit in modern compilers; add a DEV_MODE CMake
   option and a build-configuration summary.

Drop 0001-allow-build-with-cmake-4.patch: 1.7.2 already sets
cmake_minimum_required(VERSION 3.5). LICENSE.LGPL is unchanged.

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-08-01 11:57:26 -07:00
Khem Raj bf9ebecd03 libebml: upgrade 1.4.5 -> 1.4.7
Upstream changes (ChangeLog):
 * 1.4.6: mark EbmlHead as not-infinite per RFC 8794; fix leak on upper
   element found inside the last element; EbmlString::ReadFully and
   EbmlUnicodeString use std::string / automatic memory management;
   IOCallback avoids reading more than 2^32 at once; fix includes not
   implicit in modern compilers; download utfcpp automatically; add a
   DEV_MODE CMake option and a build-configuration summary.
 * 1.4.7: fix cmake rules for building with utf8cpp 4.x (upstream #344).

libebml now uses utf8cpp (utfcpp) for Unicode string handling rather
than a bundled copy: CMakeLists does find_package(utf8cpp) and otherwise
FetchContent-downloads it. Add DEPENDS = "utfcpp" (OE-core provides
utfcpp 4.1.1) so the system copy is used and the offline build resolves
utf8cpp::utf8cpp.

Drop 0001-allow-build-with-cmake-4.patch: it backported the
cmake_minimum_required(VERSION 3.5) bump that is now in 1.4.7 upstream.

Update the LICENSE.LGPL checksum for an upstream reformatting of the
license file (content still LGPL-2.1-only).

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-08-01 11:57:26 -07:00