Commit Graph

37314 Commits

Author SHA1 Message Date
Peter Kjellerstedt 52e2cac8e0 net-snmp: Backport a patch to make sure $(LDFLAGS) is before any libs
After commit 1997d3d6c4 (net-snmp: Do not
pass LDFLAGS to compiler), some linker flags, like "-Wl,--as-needed",
appear too late on the linker command line. Backport a patch that
corrects the order of the arguments given to the linker.

Unfortunately, the patch is not enough. libtool reorders the arguments
given to libtool --mode=link so that any lib dependencies appear before
other linker arguments. Therefore it is needed to inject -Wl,--as-needed
on the linker command line that libtool produces.

Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-10 19:27:35 -07:00
Changqing Li 441873fdc5 doxygen: fix reproducibility issue of doxygen-src
[ snip of CMakeLists.txt ]
BISON_TARGET(constexp
             ${CMAKE_CURRENT_LIST_DIR}/constexp.y
             ${GENERATED_SRC}/ce_parse.cpp
             COMPILE_FLAGS "${YACC_FLAGS}")
[ end of snip ]

bison embeds full paths in its generated headers, eg:
bison -o /full/build/path/generated/example.cpp ...
The header will include:
 #ifndef YY_FULL_BUILD_PATH_GENERATED_MSCGEN_LANGUAGE_HPP_INCLUDED
 #define YY_FULL_BUILD_PATH_GENERATED_MSCGEN_LANGUAGE_HPP_INCLUDED

This make doxygen-src not reproducible, fix by replacing full build path

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-10 19:27:34 -07:00
Khem Raj 0710a28b59 pm-qa: Do not let find command recurse into .pc folder
find, the way it is used will also list c files in
special directories like .pc, which is created by quilt
for managing patches and is the default PATCHTOOL

Ignore this directory during find operation.

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Cc: Ryan Eatmon <reatmon@ti.com>
2025-10-10 19:24:38 -07:00
Corentin Guillevic 3fd372d79b libblockdev: improve reproducibility
The --with-smart option behind the feature "smart" relies on the drivedb.h
header, provided by smartmontools package (/usr/share/smartmontools/drivedb.h).

However the dependencies (DEPENDS) miss this package. Furthermore, if the
--with-drivedb option is not used, the configuration step will search for the
file first on the host's rootfs. This may result in the wrong header being picked,
or the --with-smart option being silently disabled due to incomplete dependencies
(causing missing header).

The header is now guaranteed to be present due to an added dependency in the
"smart" feature, and its location is specified by the --with-drivedb option.

Signed-off-by: Corentin Guillevic <corentin.guillevic@smile.fr>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-10 19:24:38 -07:00
Clément Péron d47510d417 libeigen: upgrade 3.4.0 -> 3.4.1
- Move Eigen BLAS, LAPACK as packageconfig as they requires Fortran compiler
- Disable building TESTING
- Remove patch that has been merged

Signed-off-by: Clément Péron <peron.clem@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-10 19:24:38 -07:00
Changqing Li c5d239faa6 cdrkit: fix reproducibility issue
Normally CMake uses the build tree for the RPATH when building
executables etc on systems that use RPATH.  This will make the buildpath
included in the binaries and not reproducible, so disable RPATHs.

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-10 09:46:48 -07:00
Yoann Congal b9471f4967 monocypher: prepend MIRRORS instead of overwriting
Overwriting (instead of extending) MIRRORS in a recipe prevent user from
using default Yocto Project mirrors (https://downloads.yoctoproject.org/mirror/sources/)

As a side-effect, it might fix meta-oe-mirror build for monocypher [0].

[0]: https://autobuilder.yoctoproject.org/valkyrie/#/builders/82/builds/469

Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-09 18:13:04 -07:00
Peter Marko 9619695788 squid: patch CVE-2025-59362
Pick patch from PR ]1] mentioned in NVD report [2].

[1] https://github.com/squid-cache/squid/pull/2149
[2] https://nvd.nist.gov/vuln/detail/CVE-2025-59362

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-09 16:15:49 -07:00
Peter Marko 66b553130b squid: upgrade 6.12 -> 7.1
Refresh all patches.
ptest patches needed larger rework for new test testHeader.

License-Update: copyright years refreshed

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-09 16:15:49 -07:00
Peter Marko f088e1e1f9 squid: download from github
Devtool could not find latest versions before.

Download page [1] shows message
"Squid sources are released through GitHub. Please refer to the Releases
Page to find all released versions."

Note that also squid security advisories were moved to Github.

[1] https://www.squid-cache.org/Versions/

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-09 16:15:49 -07:00
Joao Lima ecf51fd294 openocd: add fallback repository mirror
Add a fallback mirror for the openocd repository fetch
process, so that if the primary source repo.or.cz is unavailable,
the build system will attempt to download the source code from the gitHub
mirror.

Signed-off-by: Joao Lima <joao.lima@hbkworld.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-09 11:04:34 -07:00
Joao Lima e7eb50fe25 openocd: add dmem support to am64xx and j784s4 platforms
Platform support patches:
   - Add SWD native configuration files for AM64x and J784s4 boards
   - Configure DMEM access parameters in ti_k3.cfg for direct memory operations
   - Set up DAPBUS debugger and emulated AP descriptions

Signed-off-by: Joao Lima <joao.lima@hbkworld.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-09 11:04:34 -07:00
Joao Lima 050608b50d openocd: bump the openocd, jimtcl versions
Version bumps:
   - openocd: 91bd431 -> 66ea461
   - jimtcl: fcbb449 -> f160866
   - libjaylink: 9aa7a59 -> 0d23921

Signed-off-by: Joao Lima <joao.lima@hbkworld.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-09 11:04:34 -07:00
Khem Raj d1b67ac99e pm-qa: Do not hardcode PATCHTOOL
It seems to work fine with quilt as well.

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-09 09:41:11 -07:00
Leon Anavi a57f6d42b2 python3-telnetlib3: Upgrade 2.0.4 -> 2.0.8
Upgrade to release 2.0.8:

- bugfix: object has no attribute '_extra'

License-Update: telnetlib.py and telnetlib3/tests/test_telnetlib.py
derived from Python 3.12 so a note about PYTHON SOFTWARE FOUNDATION
LICENSE VERSION 2 has been added to the LICENSE.txt. The license of
this package remains ISC.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-09 09:41:11 -07:00
Leon Anavi a8a2d944d5 python3-awesomeversion: Upgrade 25.5.0 -> 25.8.0
Upgrade to release 25.8.0:

- Refactor AwesomeVersion comparison methods and optimize regex
  patterns for performance
- Refactor AwesomeVersion comparison methods for improved
  validation and strategy handling
- Replace poetry with uv
- Update pr template
- Fix compound modifier comparison

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-09 09:41:11 -07:00
Leon Anavi 5d157933e9 python3-msgpack: Upgrade 1.1.1 -> 1.1.2
Upgrade to release 1.1.2:

- Update Cython to v3.1.4
- Update cibuildwheel to v3.2.0
- Drop Python 3.8
- Add Python 3.14
- Add windows-arm

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-09 09:41:11 -07:00
Leon Anavi 368ea9aa9a python3-filelock: Upgrade 3.18.0 -> 3.20.0
Upgrade to release 3.20.0:

- Added tox.toml to sdist
- Updated docs with example
- Added 3.14 support and drop 3.9

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-09 09:41:11 -07:00
Leon Anavi b68dd1e77a python3-whitenoise: Upgrade 6.9.0 -> 6.11.0
Upgrade to release 6.11.0:

- Support Django 6.0.
- Support Python 3.14.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-09 09:41:11 -07:00
Wang Mingyu 1543159149 spice-guest-vdagent: upgrade 0.22.1 -> 0.23.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-08 23:35:55 -07:00
Wang Mingyu ca3e6f67da python3-typer: upgrade 0.19.1 -> 0.19.2
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-08 23:35:54 -07:00
Wang Mingyu ce98bd00f8 python3-txaio: upgrade 25.6.1 -> 25.9.2
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-08 23:35:54 -07:00
Wang Mingyu 934560d4b6 python3-simplejson: upgrade 3.20.1 -> 3.20.2
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-08 23:35:54 -07:00
Wang Mingyu 6cc53385c8 python3-pymodbus: upgrade 3.11.2 -> 3.11.3
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-08 23:35:54 -07:00
Wang Mingyu 372c306e57 python3-pycurl: upgrade 7.45.6 -> 7.45.7
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-08 23:35:54 -07:00
Wang Mingyu dc94be3527 python3-inline-snapshot: upgrade 0.29.0 -> 0.29.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-08 23:35:54 -07:00
Wang Mingyu 30b56b1e9c python3-grpcio: upgrade 1.75.0 -> 1.75.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-08 23:35:53 -07:00
Wang Mingyu 6a01daf8eb python3-grpcio-tools: upgrade 1.75.0 -> 1.75.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-08 23:35:53 -07:00
Wang Mingyu a86648c579 python3-grpcio-reflection: upgrade 1.75.0 -> 1.75.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-08 23:35:53 -07:00
Wang Mingyu fd030dc40d python3-grpcio-channelz: upgrade 1.75.0 -> 1.75.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-08 23:35:53 -07:00
Wang Mingyu dd1f44679c python3-flask-restx: upgrade 1.3.0 -> 1.3.2
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-08 23:35:53 -07:00
Wang Mingyu a03be5c002 python3-cantools: upgrade 40.6.0 -> 40.7.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-08 23:35:53 -07:00
Wang Mingyu a42e47ffd6 python3-asgiref: upgrade 3.9.1 -> 3.9.2
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-08 23:35:52 -07:00
Wang Mingyu b53b84a17d python3-apispec: upgrade 6.8.3 -> 6.8.4
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-08 23:35:52 -07:00
Wang Mingyu eed642244e python3-anyio: upgrade 4.10.0 -> 4.11.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-08 23:35:52 -07:00
Wang Mingyu f999a83972 parallel: upgrade 20250822 -> 20250922
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-08 23:35:52 -07:00
Wang Mingyu 9b5ab1a96c openvpn: upgrade 2.6.14 -> 2.6.15
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-08 23:35:52 -07:00
Wang Mingyu ad0d8610ed makeself: upgrade 2.5.0 -> 2.6.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-08 23:35:52 -07:00
Wang Mingyu 56b1b5178e graphviz: upgrade 13.1.2 -> 14.0.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-08 23:35:51 -07:00
Wang Mingyu 34a7bdb72f gnome-menus: upgrade 3.36.0 -> 3.38.1
Changelog:
============
* Add GioUnix-2.0 dependency to introspect libmenu
* Translation updates

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-08 23:35:51 -07:00
Wang Mingyu aa7dcb3c2e flatbuffers: upgrade 25.2.10 -> 25.9.23
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-08 23:35:51 -07:00
Gyorgy Sarvari 74d3d9c2be libiec61850: upgrade 1.5.3 -> 1.6.1
This update contains a fix for CVE-2024-26529, CVE-2024-45970 and CVE-2024-45971

Changelog: https://github.com/mz-automation/libiec61850/blob/v1.6/CHANGELOG

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-08 18:46:04 -07:00
Jason Schonberg daf2c473d3 xfce4-mpc-plugin: upgrade 0.5.5 -> 0.6.0
Changelog: https://gitlab.xfce.org/panel-plugins/xfce4-mpc-plugin/-/tags/xfce4-mpc-plugin-0.6.0

Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-08 18:46:04 -07:00
Rajeshkumar Ramasamy 5929150a19 open-vm-tools: upgrade 12.5.0 -> 13.0.5
this release addressed below CVE:
CVE-2025-41244

Drop 0001-Fix-build-when-compiling-with-std-c23.patch which have been
merged upstream.

Changelog:
https://github.com/vmware/open-vm-tools/releases

Signed-off-by: Rajeshkumar Ramasamy <rajeshkumar.ramasamy@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-08 18:46:03 -07:00
Leon Anavi cdf4a7a4d8 python3-xxhash: Upgrade 3.5.0 -> 3.6.0
Upgrade to release 3.6.0:

- Build wheels for Python 3.14
- Python free-threading support
- Typing: Use Buffer type stubs
- Deprecate xxhash.VERSION_TUPLE, it will be removed in the next
  major release

License-Update: Update years

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-08 18:46:03 -07:00
Gyorgy Sarvari ec5a9b9684 pgpool2: upgrade 4.5.5 -> 4.6.3
Drop 0001-fix-compiling-on-32-bit-systems.patch, and change to another
patch that solves the same issue in OE, but is more likely to be
adapted by upstream (after discussion with upstream in
https://github.com/pgpool/pgpool2/pull/128)

Shortlog: https://github.com/pgpool/pgpool2/compare/V4_5_5...V4_6_3

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-08 18:46:03 -07:00
Leon Anavi 17ddc60d22 python3-beautifulsoup4: Upgrade 4.13.5 -> 4.14.2
Upgrade to release 4.14.2:

- Making ResultSet inherit from MutableSequence still resulted in
  too many breaking changes in users of the library, so it was
  reverted the ResultSet code back to where it was in 4.13.5 and
  added tests of all known breaking behavior. [bug=2125906]
- Version 4.14.0 adds function overloading to the find_* methods to
  make it easier to write type-safe Python.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-08 18:46:03 -07:00
Leon Anavi 628b06441f python3-dbus-fast: Upgrade 2.44.1 -> 2.44.5
Upgrade to release 2.44.5:

- fix: cibuildwheel sha
- Improve unmarshall performance for SignatureType
- Simplify code to unmarshall arrays

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-08 18:46:03 -07:00
Leon Anavi 0fc3ccf83a valkey: Upgrade 8.1.3 -> 8.1.4
Upgrade to release 8.1.4:

Security fixes:
- (CVE-2025-49844) A Lua script may lead to remote code execution
- (CVE-2025-46817) A Lua script may lead to integer overflow and
  potential RCE
- (CVE-2025-46818) A Lua script can be executed in the context of
  another user
- (CVE-2025-46819) LUA out-of-bound read

Bug fixes:
- Fix accounting for dual channel RDB bytes in replication stats
- Fix EVAL to report unknown error when empty error table is
  provided
- Fix use-after-free when active expiration triggers hashtable
  to shrink
- Fix MEMORY USAGE to account for embedded keys
- Fix memory leak when shrinking a hashtable without entries
- Prevent potential assertion in active defrag handling large
  allocations
- Prevent bad memory access when NOTOUCH client gets unblocked
- Converge divergent shard-id persisted in nodes.conf to primary's
  shard id
- Fix client tracking memory overhead calculation
- Fix RDB load per slot memory pre-allocation when loading from RDB
  snapshot
- Don't use AVX2 instructions if the CPU doesn't support it
- Fix bug where active defrag may be unable to defrag sparsely
  filled pages

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-08 18:46:03 -07:00
Khem Raj 93c7fc24f5 emacs: Use GNU_MIRROR in SRC_URI
Sometimes ftp.gnu.org might be slow.
Add UPSTREAM_CHECK_URI while here

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Cc: Gyorgy Sarvari <skandigraun@gmail.com>
2025-10-08 18:46:02 -07:00