Commit Graph

36751 Commits

Author SHA1 Message Date
Leon Anavi
0c94f27fda python3-huey: Upgrade 2.5.5 -> 2.6.0
Upgrade to release 2.6.0:

- "Modernize" build system to use pyproject.toml and github actions.

Fixes:
WARNING: python3-huey-2.6.0-r0 do_check_backend: QA Issue: inherits
setuptools3 but has pyproject.toml with setuptools.build_meta, use
the correct class [pep517-backend]

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-13 08:28:59 -08:00
Leon Anavi
ded508de23 python3-filelock: Upgrade 3.20.2 -> 3.20.3
Upgrade to release 3.20.3:

- Fix TOCTOU symlink vulnerability in SoftFileLock

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-13 08:28:59 -08:00
Leon Anavi
7a273013c7 python3-aenum: Upgrade 3.1.15 -> 3.1.16
Upgrade to release 3.1.16:

- standardized handling of negative numbers in flags
- support dictionary-like key access to NamedTuple
- remove newer setup.py option include_package_data

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-13 08:28:59 -08:00
Leon Anavi
50f0473ee1 python3-pylint: Upgrade 4.0.3 -> 4.0.4
Upgrade to release 4.0.4:

- Fixed false positive for ``invalid-name`` where module-level
  constants were incorrectly classified as variables when a
  class-level attribute with the same name exists.
- Fix a false positive for ``invalid-name`` on an UPPER_CASED
  name inside an ``if`` branch that assigns an object.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-13 08:28:58 -08:00
Yi Zhao
66454fe57f frr: upgrade 10.5.0 -> 10.5.1
ChangeLog:
https://github.com/FRRouting/frr/releases/tag/frr-10.5.1

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-13 08:28:58 -08:00
Jason Schonberg
993fc63f43 tumbler: upgrade 4.20.0 -> 4.20.1
Changelog: https://gitlab.xfce.org/xfce/tumbler/-/tags/tumbler-4.20.1

Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-13 08:28:58 -08:00
Liu Yiding
764f459fef xdg-user-dirs: upgrade 0.18 -> 0.19
1. Changelog
Features:
 * Add a systemd service to run xdg-user-dirs-update
 * Add initial Meson buildsystem support

Bugfixes:
 * Fix autopoint invocation

Miscellaneous:
 * Updated translations
 * Update automake boilerplate
 * Update information in README

2. Add pkgconfig to solvo following configure error:
  ../sources/xdg-user-dirs-0.19/configure: line 9319: syntax error near unexpected token `systemd,'
  ../sources/xdg-user-dirs-0.19/configure: line 9319: `PKG_CHECK_EXISTS(systemd,'

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-13 08:28:58 -08:00
Liu Yiding
6ad8b50af8 python3-google-auth: upgrade 2.45.0 -> 2.47.0
1. Changelog
https://github.com/googleapis/google-auth-library-python/blob/main/CHANGELOG.md

2. Drop 0001-make-the-TLS-tests-skip-when-pyopenssl-isn-t-availab.patch as it was merged upstream.

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-13 08:28:58 -08:00
Peter Bergin
584e70ca72 gtksourceview*: fix build issue related to S
Source code for gtksourceview will be unpacked to a directory called
'gtksourceview-${PV}'. But as the recipes have added part of PV to the
name of the recipe the default setting of variable S will be wrong.
This is fixed by explicitly setting it.

Fixing issues like:

  WARNING: gtksourceview3-3.24.11-r0 do_unpack: gtksourceview3: the directory ${UNPACKDIR}/${BP} (<snip>/gtksourceview3/3.24.11/sources/gtksourceview3-3.24.11) pointed to by the S variable doesn't exist - please set S within the recipe to point to where the source has been unpacked to
  WARNING: gtksourceview3-3.24.11-r0 do_populate_lic: Could not copy license file <snip>/gtksourceview3/3.24.11/sources/gtksourceview3-3.24.11/COPYING to <snip>/gtksourceview3/3.24.11/license-destdir/corei7-64/gtksourceview3/COPYING: [Errno 2] No such file or directory: '<snip>/gtksourceview3/3.24.11/sources/gtksourceview3-3.24.11/COPYING'
  ERROR: gtksourceview3-3.24.11-r0 do_populate_lic: QA Issue: gtksourceview3: LIC_FILES_CHKSUM points to an invalid file: <snip>/gtksourceview3/3.24.11/sources/gtksourceview3-3.24.11/COPYING [license-checksum]
  ERROR: gtksourceview3-3.24.11-r0 do_populate_lic: Fatal QA errors were found, failing task.

  WARNING: gtksourceview4-4.8.4-r0 do_unpack: gtksourceview4: the directory ${UNPACKDIR}/${BP} (<snip>/gtksourceview4/sources/gtksourceview4-4.8.4) pointed to by the S variable doesn't exist - please set S within the recipe to point to where the source has been unpacked to
  ERROR: gtksourceview4-4.8.4-r0 do_patch: Applying patch '0001-remove-pointless-check.patch' on target directory '<snip>/gtksourceview4/4.8.4/sources/gtksourceview4-4.8.4'

  WARNING: gtksourceview5-5.18.0-r0 do_unpack: gtksourceview5: the directory ${UNPACKDIR}/${BP} (<snip>/gtksourceview5/5.18.0/sources/gtksourceview5-5.18.0) pointed to by the S variable doesn't exist - please set S within the recipe to point to where the source has been unpacked to
  WARNING: gtksourceview5-5.18.0-r0 do_populate_lic: Could not copy license file <snip>/gtksourceview5/5.18.0/sources/gtksourceview5-5.18.0/COPYING to <snip>/gtksourceview5/5.18.0/license-destdir/corei7-64/gtksourceview5/COPYING: [Errno 2] No such file or directory: '<snip>/gtksourceview5/5.18.0/sources/gtksourceview5-5.18.0/COPYING'
  ERROR: gtksourceview5-5.18.0-r0 do_populate_lic: QA Issue: gtksourceview5: LIC_FILES_CHKSUM points to an invalid file: <snip>/gtksourceview5/5.18.0/sources/gtksourceview5-5.18.0/COPYING [license-checksum]
  ERROR: gtksourceview5-5.18.0-r0 do_populate_lic: Fatal QA errors were found, failing task.

Signed-off-by: Peter Bergin <peter@berginkonsult.se>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 13:20:11 -08:00
Markus Volk
e071ea3c65 btop: update 1.4.5 -> 1.4.6
Disable build-testing for now, as this would require 'googletest' dependency

v1.4.6

References | Description | Author(s)

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 13:20:11 -08:00
Gyorgy Sarvari
0b2deaab02 acpitool: update SRC_URI
The old SRC_URI stopped working (its certificate expired), and the recipe
defaulted to OE mirrors.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 13:20:11 -08:00
Gyorgy Sarvari
4fdeb484c2 gnome-keyring: set CVE_PRODUCT
The underscores and hyphens in the product name are used randomly in the CVE
database:

sqlite> select * from PRODUCTs where vendor = 'gnome' and product like '%keyr%';
CVE-2012-3466|gnome|gnome-keyring|3.4.0|=||
CVE-2012-3466|gnome|gnome-keyring|3.4.1|=||
CVE-2012-6111|gnome|gnome_keyring|3.2|=||
CVE-2012-6111|gnome|gnome_keyring|3.4|=||
CVE-2018-19358|gnome|gnome-keyring|||3.28.2|<=
CVE-2018-20781|gnome|gnome_keyring|||3.27.2|<

Set CVE_PRODUCT so that both versions are matched.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 10:25:58 -08:00
Gyorgy Sarvari
29a272744a xerces-c: set CVE_PRODUCT
The related CVEs are tracked with "xerces-c\+\+" (sic).

See CVE db query:
sqlite> select vendor, product, count(*) from PRODUCTs where product like '%xerces%' group by 1, 2;
apache|xerces-c\+\+|29
apache|xerces-j|2
apache|xerces2_java|3
redhat|xerces|3

Set CVE_PRODUCT accordingly.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 10:25:58 -08:00
Gyorgy Sarvari
e0f86a4a7f lmdb: patch CVE-2026-22185
Details: https://nvd.nist.gov/vuln/detail/CVE-2026-22185

Pick the patch that is mentioned as a solution in the related upstream bug[1].

[1]: https://bugs.openldap.org/show_bug.cgi?id=10421

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 10:25:58 -08:00
Gyorgy Sarvari
2a78ad8813 boinc-client: mark CVE-2013-2018 patched
Details: https://nvd.nist.gov/vuln/detail/CVE-2013-2018

According to oss-security email[1], version 7.0.45 included
the fixes[2][3][4]

[1]: https://www.openwall.com/lists/oss-security/2013/04/29/11
[2]: 6e205de096
[3]: e8d6c33fe1
[4]: ce3110489b

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 10:25:57 -08:00
Ankur Tyagi
2f1d7a8597 influxdb: ignore CVE-2024-30896
As mentioned in the comment[1], vulnerability is in
/api/v2/authorizations API which only exists in 2.x, 1.x is not affected.

Details: https://nvd.nist.gov/vuln/detail/CVE-2024-30896

[1] https://github.com/influxdata/influxdb/issues/24797#issuecomment-2514690740

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 10:25:57 -08:00
Leon Anavi
52c747c540 python3-aiodns: Upgrade 3.6.1 -> 4.0.0
Upgrade to release 4.0.0:

- Added new query_dns() method returning native pycares 5.x
  DNSResult types
- Deprecated query() method - still works with backward-compatible
  result types
- Deprecated gethostbyname() method - use getaddrinfo() instead
- Added compatibility layer for pycares 4.x result types to ease
  migration
- Updated dependencies

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 10:25:57 -08:00
Leon Anavi
c18c531c88 python3-pycares: Upgrade 4.11.0 -> 5.0.1
Upgrade to release 5.0.1:

- Use Literal for type
- Use CMake for compiling c-ares
- Move project metadata to pyproject.toml
- Remove gethostbyname
- Remove getsock
- Replace ares_{get,set}servers with ares_{get,set}_servers_csv
- Remove ares_init and ares_mkquery, they are unused
- Make c-ares thread-safety mandatory
- Migrate API to c-ares' dnsrec variants
- Build wheels in parallel
- Update bundled c-ares to v1.34.6
- Make callback a mandatory kwarg-only argument
- Return bytes data for TXT records
- Add support for TLSA, HTTP and URI queries
- Remove event_thread option, make it implicit
- Fix IDNA 2008 test

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 10:25:57 -08:00
Leon Anavi
4ca56224e6 python3-langtable: Upgrade 0.0.68 -> 0.0.69
Upgrade to release 0.0.69:

- Add Georgian console fonts
- Add Adlm script to SN
- Add dra, Tutg, ath, cmc, Cham, tai
- Remove License classifier (license tag with SPDX license
  expression is already there)

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 10:25:57 -08:00
Leon Anavi
d58da103e1 python3-identify: Upgrade 2.6.13 -> 2.6.15
Upgrade to release 2.6.15:

- Add .piskel extension
- Fix: make PKGBUILD files a superset of .bash
- [pre-commit.ci] pre-commit autoupdate

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 10:25:57 -08:00
Liu Yiding
9b77eae698 opencv: upgrade 4.12.0 -> 4.13.0
1.Changelogs
  https://github.com/opencv/opencv/wiki/OpenCV-Change-Logs#version4130

2.Remove following patches as they have been merged in upstream.
  27691.patch
  0001-Renamed-templated-BlocksCompensator-feed-method-to-e.patch

3.After upgrading to 4.13.0, WITH_KLEIDICV is ON as default in aarch64,
so build kleidicv along with openCV in aarch64.

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 10:25:56 -08:00
Hongxu Jia
f6506e8a65 menulibre: fix do_install failed
Use pip 25.3 to install failed
...
Traceback (most recent call last):
  File "menulibre-2.4.0/setup.py", line 245, in <module>
    DistUtilsExtra.auto.setup(
    ~~~~~~~~~~~~~~~~~~~~~~~~~^
        name='menulibre',
        ^^^^^^^^^^^^^^^^^
    ...<12 lines>...
        cmdclass={'install': InstallAndUpdateDataDirectory}
        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
    )
    ^
  File "recipe-sysroot-native/usr/lib/python3.13/site-packages/DistUtilsExtra/auto.py", line 98, in setup
    __requires(attrs, src_all)
    ~~~~~~~~~~^^^^^^^^^^^^^^^^
  File "recipe-sysroot-native/usr/lib/python3.13/site-packages/DistUtilsExtra/auto.py", line 471, in __requires
    __add_imports(imports, s, attrs)
    ~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^
  File "recipe-sysroot-native/usr/lib/python3.13/site-packages/DistUtilsExtra/auto.py", line 405, in __add_imports
    if alias.name and __external_mod(cur_module, alias.name, attrs):
                      ~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "recipe-sysroot-native/usr/lib/python3.13/site-packages/DistUtilsExtra/auto.py", line 377, in __external_mod
    return 'dist-packages' in mod.__file__ or 'site-packages' in mod.__file__ or \
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
TypeError: argument of type 'NoneType' is not iterable
...

Refer [1] to correct one line in setup.py

[1] 81be63961a

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 10:25:56 -08:00
Yi Zhao
3b5492f57f nng: add ptest
Ptest results on genericx86-64 BSP:

$ run-ptest
PASS: compat_block
PASS: compat_bug777
PASS: compat_bus
PASS: compat_cmsg
PASS: compat_device
PASS: compat_iovec
PASS: compat_msg
PASS: compat_options
PASS: compat_pair
PASS: compat_pipeline
PASS: compat_poll
PASS: compat_reqrep
PASS: compat_reqttl
PASS: compat_shutdown
PASS: compat_survey
PASS: compat_surveyttl
PASS: cplusplus_pair
PASS: device
PASS: files
FAIL: httpclient
PASS: httpserver
PASS: inproc
PASS: ipc
PASS: ipcsupp
PASS: multistress
PASS: nonblock
PASS: options
PASS: pipe
PASS: pollfd
PASS: reqctx
PASS: reqstress
PASS: scalability
PASS: synch
PASS: tcp
PASS: tcp6
PASS: tcpsupp
PASS: tls
PASS: ws
PASS: wss

The httpclient case attempts to retrieve the Content-Length field from
HTTP header of http://example.com/, but because the site uses chunked
transfer encoding, the Content-Length field is not present, leading to
an assertion failure.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 10:25:56 -08:00
Gyorgy Sarvari
31de060b48 boinc-client: set CVE_PRODUCT
The relevant CVEs are tracked with underscore in their name.

See CVE db query:
sqlite> select vendor, product, count(*) from PRODUCTs where product like '%boinc%' group by 1, 2;
berkeley|boinc_client|2
berkeley|boinc_forum|1
universityofcalifornia|boinc_client|165
universityofcalifornia|boinc_server|5

Set the CVE_PRODUCT accordingly.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 10:25:56 -08:00
Gyorgy Sarvari
4da079d7f5 asyncmqtt: set CVE_PRODUCT
The CVEs are tracked with an underscore in the product name:

sqlite> select * from PRODUCTs where product like '%async%mq%';
CVE-2025-65503|redboltz|async_mqtt|10.2.5|=||

This patch sets the correct CVE_PRODUCT.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 10:25:56 -08:00
Peter Marko
5d3936d5dd nginx: ignore CVE-2025-53859 for 1.28.1
Fix is included via commit [1].

[1] fbbbf189da

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 10:25:56 -08:00
Peter Marko
264d8acc92 libsodium: patch CVE-2025-69277
Pick patch per [1].

[1] https://nvd.nist.gov/vuln/detail/CVE-2025-69277

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 10:25:55 -08:00
Markus Volk
a1b9e6e4f2 libcanberra: add runtime recommendation for sound-theme-freedesktop
Required to actually play event sounds

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 10:25:55 -08:00
Yi Zhao
9e55e9f115 nng: upgrade 1.7.3 -> 1.11
ChangeLog:
https://github.com/nanomsg/nng/releases/tag/v1.11
https://github.com/nanomsg/nng/releases/tag/v1.10
https://github.com/nanomsg/nng/releases/tag/v1.9.0
https://github.com/nanomsg/nng/releases/tag/v1.8.0

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 10:25:55 -08:00
Yi Zhao
60e60fed31 nanomsg: add ptest
Ptest results:

$ run-ptest
PASS: async_shutdown
PASS: block
PASS: bug328
PASS: bug777
PASS: bus
PASS: cmsg
PASS: device
PASS: device4
PASS: device5
PASS: device6
PASS: device7
PASS: domain
PASS: emfile
PASS: hash
PASS: inproc
PASS: inproc_shutdown
PASS: iovec
PASS: ipc
PASS: ipc_shutdown
PASS: ipc_stress
PASS: list
PASS: msg
PASS: pair
PASS: pipeline
PASS: poll
PASS: prio
PASS: pubsub
PASS: reqrep
PASS: reqttl
PASS: separation
PASS: shutdown
PASS: stats
PASS: survey
PASS: surveyttl
PASS: symbol
PASS: tcp
PASS: tcp_shutdown
PASS: term
PASS: timeo
PASS: trie
PASS: ws
PASS: ws_async_shutdown
PASS: zerocopy

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 10:25:55 -08:00
Yi Zhao
fea43ed974 nanomsg: upgrade 1.2.1 -> 1.2.2
ChangeLog:
https://github.com/nanomsg/nanomsg/releases/tag/1.2.2

Drop 0001-allow-build-with-cmake-4.patch as the issue has been fixed
upstream.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 10:25:55 -08:00
Gyorgy Sarvari
b891bc7cac python3-filelock: add ptest support
The tests take <15s to execute.

Sample output:

root@qemux86-64:~# ptest-runner
START: ptest-runner
2026-01-09T18:00
BEGIN: /usr/lib/python3-filelock/ptest
PASS: tests/test_async_filelock.py:test_simple[a-str-AsyncUnixFileLock]
PASS: tests/test_async_filelock.py:test_simple[a-str-AsyncSoftFileLock]
PASS: tests/test_async_filelock.py:test_simple[a-PurePath-AsyncUnixFileLock]
PASS: tests/test_async_filelock.py:test_simple[a-PurePath-AsyncSoftFileLock]
PASS: tests/test_async_filelock.py:test_simple[a-Path-AsyncUnixFileLock]
PASS: tests/test_async_filelock.py:test_simple[a-Path-AsyncSoftFileLock]
[...many lines...]
PASS: tests/test_filelock.py:test_mtime_zero_exit_branch[SoftFileLock-TimeoutError]
PASS: tests/test_filelock.py:test_mtime_zero_exit_branch[UnixFileLock-PermissionError]
PASS: tests/test_virtualenv.py:test_virtualenv
============================================================================
Testsuite summary
DURATION: 10
END: /usr/lib/python3-filelock/ptest
2026-01-09T18:00
STOP: ptest-runner
TOTAL: 1 FAIL: 0

(There are 20 Windows-only tests, which are skipped)

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 08:53:50 -08:00
Gyorgy Sarvari
9291faa919 python3-send2trash: add ptest support
The tests take less than a second to execute.

The current source distribution is missing a test file,
which I added with a patch. The problem is already solved
by upstream just not tagged yet - the patch can be dropped
with the next update.

Sample output:
root@qemux86-64:~# ptest-runner
START: ptest-runner
2026-01-09T17:11
BEGIN: /usr/lib/python3-send2trash/ptest
SKIP: tests/test_plat_win.py:tests/test_plat_win.py # SKIP Skipping windows-only tests
PASS: tests/test_plat_other.py:test_trash
PASS: tests/test_plat_other.py:test_multitrash
PASS: tests/test_plat_other.py:test_trash_bytes
PASS: tests/test_plat_other.py:test_trash_unicode
PASS: tests/test_plat_other.py:test_trash_topdir
PASS: tests/test_plat_other.py:test_trash_topdir_fallback
PASS: tests/test_plat_other.py:test_trash_topdir_failure
PASS: tests/test_plat_other.py:test_trash_symlink
PASS: tests/test_script_main.py:test_trash
PASS: tests/test_script_main.py:test_no_args
============================================================================
Testsuite summary
DURATION: 1
END: /usr/lib/python3-send2trash/ptest
2026-01-09T17:11
STOP: ptest-runner
TOTAL: 1 FAIL: 0

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 08:53:49 -08:00
Markus Volk
0ccf384c90 libcanberra: update 0.30 -> 0.30-19
Lennart Poettering stopped maintaining libcanberra over a decade ago but it is still
maintained by the debian gnome-team.

Most notable improvement is that building the libcanberra-gtk3-module doesn't depend
on gtk2 anymore and thus libcanberra isn't dependent on x11 to build support for gtk3

- fetch source from salsa.debian.org, use git for it
- remove outdated patches
- dont build gtk+ module by default anymore
- simplify packaging

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 08:53:49 -08:00
Leon Anavi
56f4b30c99 python3-gcovr: Upgrade 8.3 -> 8.5
Upgrade to release 8.5:

Breaking changes:

- The option --lcov-test-name doesn't accept values with spaces
  anymore.
- The option --lcov-format-1.x is deprecated and mapped to
  --lcov-format-version=1.x.
- Changes to HTML templates.

New features and notable changes:

- Due to added support for LLVM source based code coverage format
  some configuration file keys got changed. The old gcov named
  options are still supported but they also affect the LLVM
  toolchain.

Bug fixes and small improvements:

- Fix coveralls report if there are several coverage elements per
  line.
- Fix not excluded conditions if branches are excluded by comments.
- Fix reported excluded branches in LCOV report.
- Fix exclusion filter --gcov-exclude.
- Add --json-trace-data-source to include the trace data source in
  the JSON report independent from --verbose.
- Remove generated gcov files on error and catch additional gcov
  error message.
- Change default HTML theme excluded line color.
- Move theme colors to a separate CSS file so they can be overridden
  with a simple --html-template-dir directory with only the
  style.colors.css file.
- Fix regular expression for detecting a version mismatch between
  gcc and gcov.
- Improve logging messages for GCOV execution errors to not print
  information twice and add trace messages for gcov execution.
- Fix handling of lines after function specialization.
- Improve performance by changing logging messages (level and lazy
  interpolation).
- Fix text report for covered decisions.
- Fix runtime problem introduced with 8.4.
- Fix wrong entries in data source attribute of JSON report.
- Fix nested HTML report without coverage data.
- Add warning if coverage data is empty.
- Add warning if function lines are missing in external generated
  GCOV files.
- Extend support for zipped reports. If last suffix is .xz then
  LZMA is used to compress the report.
- Fix function exclusion in report generation.
- Do not ignore lines without functions, e.g. from inlined code.
- Ignore all whitespaces instead of only spaces for detection of
  noncode lines.
- Add support for temporary merging line coverage objects without
  modifying the data model.
- Change internal behavior of --exclude-function-lines to exclude
  the line of function definition instead of removing it completely.
- Ensure that all functions have a line coverage element in LCOV
  report.

License-Update: Update years

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 08:53:49 -08:00
Leon Anavi
988b5182c9 python3-xmlschema: Upgrade 4.2.0 -> 4.3.0
Upgrade to release 4.3.0:

- Add arguments validation for schemas and validation methods (by
  validation contexts)
- Add custom XPath parser for find/findall/iterfind APIs on schemas
  for match singleton sequence also if position is a number greater
  than 1 in predicate expression
- Improve build of XSD elements and groups, using a three-state
  built flag for components
- Extend and fix memory tests (Python 3.14+ seems to consume more
  memory)
- Drop support for Python 3.9 and add development support for
  Python 3.15

License-Update: Update years

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 08:53:49 -08:00
Leon Anavi
26ef11eac6 python3-fsspec: Upgrade 2025.5.1 -> 2025.12.0
Upgrade to release 2025.12.0:

- fsspec.parquet to support filters and multiple files
- passing withdirs in aync _glob()
- fix _rm_file/_rm redirection in async
- allow arrowFile to be seekable
- add size attribute to arrowFile
- support py3.14 and drop 3.9
- avoid ruff warning

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 08:53:49 -08:00
Leon Anavi
bcfeba2a13 python3-typer: Upgrade 0.21.0 -> 0.21.1
Upgrade to release 0.21.1:

- Fix escaping in help text when rich is installed but not used.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 08:53:49 -08:00
Gyorgy Sarvari
3ee544e759 python3-twitter: mark CVE-2012-5825 patched
Details: https://nvd.nist.gov/vuln/detail/CVE-2012-5825

The Debian bugtracker[1] indicated that the issue is tracked by
upstream in github[2] (with a difference CVE ID, but same issue),
where the vulnerability was confirmed. Later in the same github issue
the solution is confirmed: the project switched to use the requests
library, which doesn't suffer from this vulnerability.

Due to this mark the CVE as patched.

[1]: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=692444
[2]: https://github.com/tweepy/tweepy/issues/279

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 08:53:48 -08:00
Gyorgy Sarvari
a5ee234b8c python3-uvicorn: mark CVE-2020-7694 patched
Details: https://nvd.nist.gov/vuln/detail/CVE-2020-7694

The vulnerability was reported to the project[1], and the commit[2] that
resolved the issue has been part of the project since version 0.11.7.

Mark the CVE as patched due to this.

[1]: https://github.com/Kludex/uvicorn/issues/723
[2]: 895807f94e

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 08:53:48 -08:00
Gyorgy Sarvari
93671dd613 python3-reportlab: mark CVE-2020-28463 patched
Details: https://nvd.nist.gov/vuln/detail/CVE-2020-28463

According to Debian[1] it has been fixed since version 3.5.55[2]
Mark is as patched.

[1]: https://security-tracker.debian.org/tracker/CVE-2020-28463
[2]: https://hg.reportlab.com/hg-public/reportlab/rev/7f2231703dc7

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 08:53:48 -08:00
Gyorgy Sarvari
6e936626cb libcereal: set CVE_PRODUCT
The relevant CVEs are associated with usc:cereal CPE.

See CVE db query:

sqlite> select * from PRODUCTS  where PRODUCT like '%cereal%';
CVE-2020-11104|usc|cereal|||1.3.0|<=
CVE-2020-11105|usc|cereal|||1.3.0|<=

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 08:53:48 -08:00
Markus Volk
ba92b3d7ac xfce4-settings: rename libcanberra rrecommends
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 08:53:48 -08:00
Markus Volk
4a81111ba2 gnome-disk-utility: remove outdated patch
Dont remove libcanberra dependency. Meanwhile it can be built without
pulling in gtk2

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 08:53:48 -08:00
Jiaying Song
baa3cc3df0 python3-aiohttp: upgrade 3.13.2 -> 3.13.3
Changelog:https://docs.aiohttp.org/en/stable/changes.html

Signed-off-by: Jiaying Song <jiaying.song.cn@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 08:53:47 -08:00
Markus Volk
b14d44612a fex: uodate 2511 -> 2601
FEX Release FEX-2601

ARM64Emitter

Force NOP padding to be enabled (9e8915e)
Arm64Emitter

Initial work for LoadConstant padding audit (d582356)
BranchOps

Use RIP relocs for direct branch targets (c57df73)
CMake

Move CMakeModules to Data/CMake (651ef64)
Fix mingw if host has libxxhash-dev installed (900c179)
Support overriding version/hash via CMake args (19d3450)
CodeCache

Fix misparenthesized expression in SaveData() (9101e70)
Rebase block entrypoint info (5747d1c)
Make LoadData Thread argument an optional pointer (bc069f2)
Implement automatic cache generation (eb425fe)
Implement runtime cache validation (93f6a8c)
Trigger delayed cache loading for the main executables and its interpreter (71c8436)
Implement cache loading (ec67670)
Common

Use LOCALAPPDATA for GetCacheDirectory on WOW64/ARM64EC (499970d)
Config

Remove stdout from OutputLog (e1c6a91)
Dispatcher

Silence warning on ARM64EC (9a12868)
FEXCore

Cleanup pointers structure (b29a78c)
Fixes circular dependency with thunk callback (5627ddf)
Switch constant emission to default to NoPad (2b4492c)
Revert literal optimization from #4884 (da46d51)
FEXOfflineCompiler

Implement SyscallHandler::LookupExecutableFileSection (5ca549e)
FEXServer

Add protocol interface to request code cache population (805a4c1)
Frontend

Only decode REX if it is at the correct location (c8d72ea)
Also fetch relocations and section bounds when validating (0a18ea8)
ImageTracker

Load AOT images (a3779be)
Load PE relocations when generating code caches (b87bb1d)
Support codemap file generation (c54dfd9)
Track loaded PE images for LookupExecutableFileSection (212a3f4)
Interpreter

Moves around the thread and ELF initialization code (ed1d495)
JIT

Fixes typo (c4258be)
LinuxSyscalls

x32
Fixes fcntl assert (6c06f47)
LookupCache

Fix mistake in nested CacheBlockMapping call (a957f1f)
OpcodeDispatcher

Explicitly calculate flags after _TelemetrySetValue (281981e)
Relocations

Disable 6-byte size optimization in InsertGuestRIPMove (c7eb4c8)
Switch to robin_map to improve lookup perf (4889596)
SHMStats

Avoid ISB usage when stats are disabled (6a49b8c)
Scripts

Have InstallFEX check kernel version (b407688)
Steam

Don't let the FEXServer inherit FEXServerManager's original stdout (53925dc)
Syscalls

Fix DEBUG_STRACE printing (e859109)
Thunks

Vulkan
Update for v1.4.337 (668e027)
Tools

pidof
Fixes FEXpidof after #5097 (7e4e017)
VDSO

Forgot to remove a if check (144c4bf)
WOW64

Lock the JIT context and block suspend during context operations (a25d90d)
WinAPI

Implement Sleep (37b0e9e)
Windows

Improve handling of RWX memory (d592e2a)
Invalidate code in freed memory after the free syscall (cb7de45)
Fix RtlWaitOnAddress signature (f098b41)
Implement _[w]sopen file APIs (f819999)
Introduce ImageTracker for tracking per-loaded-image data (dc764db)
Switch GetSection/ExecutableFilePath to returning full paths (956f97e)
Split out CRT/WinAPI reimplementation (ebdbf58)
WritePriorityMutex

Add some more documentation (9fa8148)
Fix rare case of dropped read waiter wakes (ce9824a)
Misc

[cmake] explicit platform and bit-width checks (dbd802c)
[cmake] more parenthesis cleanups, linker gc module, more same-line stuff (1f6b3d5)
[cmake] refactor: compiler and architecture handling (51f6722)
[cmake] better option descriptions + more consistent language (9c0c969)
Constant audit (fd2ee4e)
_Constant audit (851fbae)
First round of LoadConstant auditing (5bbbe4d)
[cmake] Use a Find module for xxhash (5a47565)
[cmake] do not use uppercase command names (f24f88e)
[cmake] reduce usage of trivial variables (0edf961)
[cmake] prefer end parenthesis on same line, no space after some calls (b41b967)
[cmake] FEXCore: further reduce library redundancy (f153d86)
[cmake] propagate -ISource to all Tools (bd8f6f1)
[cmake] use MINGW builtin rather than custom detection (7cdef04)
Some minor NFC (974ba78)
Guest relocation support (fef1993)
Various trivial fixes for #5106 (296988b)
code-format-helper: Update urllib3 dependency (2e2563a)
github

steamrt4
Additional comments (bf9ab7f)
unittests

ASM

Adds test for flags clobber in TelemetrySetValue (eb27576)
Test 32-bit displacement encoding (d197300)
FEXLinuxTests

Fix gcc build (fedebf4)
Force clang building for tests (62383a1)

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 08:53:47 -08:00
Gyorgy Sarvari
15aca0b2fa raptor2: set CVE_PRODUCT
All relevant CVEs are files against these CPEs.

See CVE db query (zediious vendor is not relevant):

sqlite> select * from PRODUCTs where PRODUCT like '%raptor%' and vendor <> 'symantec' and product <> 'velociraptor';
CVE-2012-0037|librdf|raptor|||2.0.7|<
CVE-2017-18926|librdf|raptor_rdf_syntax_library|2.0.15|=||
CVE-2020-25713|librdf|raptor_rdf_syntax_library|2.0.15|=||
CVE-2023-49078|zediious|raptor-web|0.4.4|=||
CVE-2024-57822|librdf|raptor_rdf_syntax_library|||2.0.16|<=
CVE-2024-57823|librdf|raptor_rdf_syntax_library|||2.0.16|<=

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 08:53:47 -08:00
Markus Volk
2b499660d0 pavucontrol: update 5.0 -> 6.2
- switch to meson buildsystem
- pavucontrol now requires gtk4 and thus requires gpu acceleration
- remove patch. Meanwhile libcanberra is optional and build doesn't
  fail without anymore
- pavucontrol was migrated from intltool to gettext
- add packageconfigs for libcanberra and lynx to have both disabled
  by default

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 08:53:47 -08:00
Markus Volk
3a57e52745 xfce4-pulseaudio-plugin: unbreak build with pavucontrol6
'pavucontrol-6' requires gtk4 and thus also needs gpu acceleration
Only recommend to install pavucontrol if it would run

- remove x11 from DISTRO_FEATURES. There's no direct dependency on it
- add PACKAFECONFIG for libcanberra

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 08:53:47 -08:00
Wang Mingyu
ddaf5e0f39 imlib2: upgrade 1.12.5 -> 1.12.6
Changelog:
==========
- Y4M loader: add support for 10-bit 4:4:4
- Y4M loader: add support for 10-bit 4:2:2
- Y4M loader: add example for 8-bit mono
- Y4M loader: add support for 10-bit mono
- Y4M loader: fix support for full-range mono
- Y4M loader: fix support for odd dimensions
- Y4M loader: add support for 12/14/16-bit mono
- test/images: Remove intermediate generated file
- imlib2_view: Set title
- imlib2_view: Scale image when resizing window
- imlib2_view: A couple of fixes to previous commit
- test_load_2: Add new y4m test images
- test_load_2: Add more new y4m test images
- test_load_2: Add more new y4m test images
- autofoo: Use AM_LIBTOOLFLAGS, not LIBTOOLFLAGS
- gradients: Fix rendering of gradients in larger images
- imlib2_conv: Fix constness warning
- gradients: Better gradients with angles
- Compile cleanly with -Wdouble-promotion
- XPM loader: Add missing progress callback on incomplete image data

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 08:53:47 -08:00