Commit Graph

16191 Commits

Author SHA1 Message Date
Wang Mingyu 430ff5e8a9 libspdm: upgrade 3.8.1 -> 3.8.2
Changelog:
============
- os_stub/openssllib: Allow building with older OpenSSL versions
- Ignore MSVC warning when compiling OpenSSL
- Bring fixes from main to 3.8

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-25 09:49:50 -08:00
Wang Mingyu 549e005d20 jwt-cpp: upgrade 0.7.1 -> 0.7.2
Changelog:
===========
- Improve as_date narrowing conversion from C4244 warning
- update trait dependencies to support CMake v4
- Fix linter error
- Update workflows for new GitHub Action Runner Images
- Support passing ssl library key handles to algorithms
- Update CMP0135 to new behaviour
- Fix error in CMake config-file package
- CMake: synchronize cmake_minimum_required from main CMakeLists.txt
- Reduce usage of std::time_t, std::chrono::system_clock::to_time_t and
  system_clock::from_time_t in order to get correct dates when working with a
  32bit application
- Fix set_expires_in not accepting non-default Period
- AppVeyor Warnings

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-25 09:49:49 -08:00
Wang Mingyu 853aecb2f9 imagemagick: upgrade 7.1.2-13 -> 7.1.2-15
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-25 09:49:49 -08:00
Wang Mingyu 43d33eb4bb gensio: upgrade 3.0.1 -> 3.0.2
Changelog:
=========
- Fix afskmdm shutdown issues
- Fix a crash if gensio_acc_disable() is called more than once.
- Allow the pcre2 package to be used.
- Fix a locking issue in cm108gpio.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-25 09:49:49 -08:00
Wang Mingyu 5174bfeacb feh: upgrade 3.11.2 -> 3.11.3
Changelog:
==========
* Support DOS-style \r\n line breaks when loading filelists. Note that
  they will be saved with UNIX-style \n line breaks regardless of input
  format. This is intentional.
* Fix --action, --info, --title and similar commands hard-coding the
  maximum length of the formatted output to 4095 characters.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-25 09:49:49 -08:00
Wang Mingyu 8d4b22bf08 ctags: upgrade 6.2.20260125.0 -> 6.2.20260222.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-25 09:49:48 -08:00
Wang Mingyu 43109b9265 cmark: upgrade 0.31.1 -> 0.31.2
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-25 09:49:48 -08:00
Wang Mingyu 052eca7394 catch2: upgrade 3.12.0 -> 3.13.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-25 09:49:48 -08:00
Wang Mingyu 61f8a5e8e5 byacc: upgrade 20241231 -> 20260126
License-Update: Copyright year updated to 2026.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-25 09:49:48 -08:00
Wang Mingyu 9704626d52 bdwgc: upgrade 8.2.10 -> 8.2.12
License-Update: Copyright year updated to 2025.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-25 09:49:48 -08:00
Wang Mingyu 0a67fd110b asyncmqtt: upgrade 10.2.6 -> 10.3.0
Changelog:
=============
- Added Share Name character check.
- Implemented cmake package version checking.
- Fixed broker tool not delivering all retained messages when wildcard
  subscription matches multiple topics.
- Added get_qos2_publish_handled_pids(), restore_qos2_publish_handled_pids(),
  restore_packets(), and get_stored_packets() to client for convenient.
- get_endpoint() can be omitted now.
- Refined reconnect examples.
- Added websocket async_close timeout.
- Added documentation regarding stream reuse restrictions for TLS-related
  streams.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-25 09:49:48 -08:00
Wang Mingyu 935b8c85a9 abseil-cpp: upgrade 20260107.0 -> 20260107.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-25 09:49:47 -08:00
Markus Volk ea7946e205 libsdl3-image: update 3.2.6 -> 3.4.0
- Fix license checksum: Copyright year has been changed
- Add support for av1 and jxl
- libavif is in meta-multimedia -> disable av1 by default

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-24 23:22:37 -08:00
Liu Yiding dbc8163677 tigervnc: Fix do_rootfs Error
Fix the following error:
ERROR: core-image-minimal-1.0-r0 do_rootfs: Postinstall scriptlets of ['tigervnc'] have failed. If the intention is to defer them to first boot,
then please place them into pkg_postinst_ontarget:${PN} ().

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-24 22:30:31 -08:00
Colin McAllister 1dd10406bd iperf2: Update CVE_PRODUCT
CPEs are registered for iperf_project2:iperf2 in addition to
iperf_project:iperf. By changing CVE_PRODUCT to an appends, this ensures
that both iperf and iperf2 CPEs are used for CVE matching.

Signed-off-by: Colin Pinnell McAllister <colin.mcallister@garmin.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-24 22:30:31 -08:00
Gyorgy Sarvari d79130035f freerdp: patch CVE-2026-23532
Details: https://nvd.nist.gov/vuln/detail/CVE-2026-23532

The related Github advisory[1] contains a detailed analysis about
the vulnerability. Pick the patch that describes the same
issue in its description.

[1]: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-fq8c-87hj-7gvr

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-24 22:30:31 -08:00
Gyorgy Sarvari df8905be0f freerdp: patch CVE-2026-23530
Details: https://nvd.nist.gov/vuln/detail/CVE-2026-23530

The related Github advisory[1] contains an amalysis of the
vulenrability, describing the issue and the root cause also.

Backported the commit that implemented the solution described
in the advisory.

[1]: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-r4hv-852m-fq7p

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-24 22:30:31 -08:00
Gyorgy Sarvari 23ac8a6f36 live555: upgrade 20210824 -> 20260112
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-24 22:30:28 -08:00
Gyorgy Sarvari 398fa05aa8 protobuf: ignore CVE-2026-0994
Details: https://nvd.nist.gov/vuln/detail/CVE-2026-0994

The vulnerability impacts only the python bindings of protobuf, which
is in a separate recipe (python3-protobuf, where it is patched).

Ignore this CVE in this recipe due to this.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-24 22:30:28 -08:00
Gyorgy Sarvari 70a90d49b9 polkit: add info about CVE-2016-2568
Details: https://nvd.nist.gov/vuln/detail/CVE-2016-2568

This commit mostly just tries to add some info to this issue, in the
hope that it will save some time for others who try to investigate it.

This CVE most probably will stay open in meta-oe in the foreseeable future,
although it can be mitigated reasonably easily by the users of the layer.

The description of the vulnerability is short enough that it can be
reproduced here: "pkexec, when used with --user nonpriv, allows local
users to escape to the parent session via a crafted TIOCSTI ioctl call,
which pushes characters to the terminal's input buffer."

The general consensus amongst developers/major distros[1][2][3] seems to be that
it should be mitigated on the kernel side, to not allow non-privileged
users to fake input.

To this end, the kernel has introduced a new config in v6.2, called
CONFIG_LEGACY_TIOCSTI - when it is enabled, non-privileged used can
also fake input. It is however by default enabled (and it is also enabled
in the kernels shipped in oe-core, at least at the time of writing this).

Disabling this kernel config is considered to be the mitigation, to allow
input-faking only by privileged users.

[1]: https://security-tracker.debian.org/tracker/CVE-2016-2568
[2]: https://bugzilla.suse.com/show_bug.cgi?id=968674
[3]: https://marc.info/?t=145694748900001&r=1&w=2 / https://marc.info/?l=util-linux-ng&m=145702209921574&w=2

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-24 22:30:28 -08:00
Gyorgy Sarvari f059dcebc3 openjpeg: patch CVE-2023-39327
Details: https://nvd.nist.gov/vuln/detail/CVE-2023-39327

Take the patch that is used by OpenSUSE to mitigate this vulnerability.
Upstream seems to be unresponsive to this issue.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-24 22:30:28 -08:00
Gyorgy Sarvari a4583e0e80 libcdio: mark CVE-2024-36600 fixed
Details: https://nvd.nist.gov/vuln/detail/CVE-2024-36600

The vulnerability is fixed since 2.2.1.rc1[1], and officially
since v2.3.0. However NVD tracks it like v2.3.0 was still vulnerable.
Mark the CVE explicitly patched.

[1]: https://github.com/libcdio/libcdio/blob/master/NEWS.md

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-24 22:30:27 -08:00
Gyorgy Sarvari 3cabaa4ee7 freerdp: ignore CVE-2026-22853
Details: https://nvd.nist.gov/vuln/detail/CVE-2026-22853

The vulnerable feature was introduced in v3.9.0[1], the
recipe version is not affected. Ignore this CVE.

[1]: https://github.com/FreeRDP/FreeRDP/commit/a4bd5ba8863c0959501d4604159042a311dae85a

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-24 22:30:27 -08:00
Gyorgy Sarvari e3fbcd0250 freerdp: patch CVE-2026-22852
Details: https://nvd.nist.gov/vuln/detail/CVE-2026-22852

The related github advisory[1] comes with an analysis of the
vulnerability, including pointing to the vulnerable code
snippet. Backported the commit that touched the mentioned
code part in the fixed version, and is in line with the
description of the issue.

Ptests passed successfully.

[1]: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-9chc-g79v-4qq4

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-24 22:30:27 -08:00
Bartosz Golaszewski 172c473caf libgpiod: update to v2.2.3
Bug-fix release addressing a couple problems in gpio-manager and tests.

Signed-off-by: Bartosz Golaszewski <bartosz.golaszewski@oss.qualcomm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-24 22:30:26 -08:00
Khem Raj 6ba45c1f94 Revert "libsdl3-image: update 3.2.6 -> 3.4.0"
This reverts commit 0d686b2c5b.
2026-02-24 22:30:26 -08:00
Gyorgy Sarvari 7bc93734b8 hplip: set CVE_PRODUCT
This recipe gets CVEs with two CPEs: hplip and linux_imaging_and_printing.

Set the CVE_PRODUCT accordingly.

See CVE db query:

sqlite> select * from PRODUCTs where PRODUCT in ('hplip', 'linux_imaging_and_printing');
CVE-2009-0122|hp|hplip|2.7.7|=||
CVE-2009-0122|hp|hplip|2.8.2|=||
CVE-2015-0839|hp|linux_imaging_and_printing|||3.17.7|<=
CVE-2025-43023|hp|linux_imaging_and_printing|||3.25.2|<

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-20 23:34:23 -08:00
Gyorgy Sarvari be28379a19 can-isotp: drop recipe
This out-of-tree kernel module was mainlined in Linux 5.10.
The previous LTS kernel, 5.4 is EOL, and oe-core ships with newer
kernels - there is no need to keep this recipe around.

It also has an explicit SKIP_RECIPE tag, it wasn't tested since
a long time.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-20 23:34:22 -08:00
Gyorgy Sarvari 95e4da06e4 cfengine: upgrade 3.21.0 -> 3.26.0
Changelog: https://github.com/cfengine/core/blob/3.26.0/ChangeLog

License-Update: The project switched from pcre to pcre2. This small
change is incorporated in the license, where the dependencies are listed.

libpcre2 and OpenSSL is now a mandatory dependencies, the corresponding
PACKAGECONFIGs are dropped.

Patch that was incorporated in this release is also dropped.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-20 23:34:21 -08:00
Gyorgy Sarvari 68c5fd3d85 cfengine: remove SKIP_RECIPE tag
The recipe compiles fine with OpenSSL 3, compatibility has been added in
version 3.20.

While here, fix some broken PACKAGECONFIGs too.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-20 23:34:21 -08:00
Anuj Mittal ced0eeb223 thermald: fix upstream check
Look at the correct URL for new tags and exclude incorrectly tagged [1]
2.15.10 release.

[1] https://github.com/intel/thermal_daemon/issues/504

Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-20 23:34:21 -08:00
Anuj Mittal 7e94be1f7b thermald: include the correct HOMEPAGE
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-20 23:34:21 -08:00
Anuj Mittal 6b77c52b0a thermald: import from meta-intel
thermald now supports ARM platforms [1], so move it out of meta-intel
to allow broader reuse.

This version remains compatible only with x86 but a future recipe
upgrade should fix COMPATIBLE_MACHINE.

[1] thermal_daemon 1931a12e7e ("Add ARM backend and enable ARM platform detection")

Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-20 23:34:21 -08:00
Gyorgy Sarvari 85fa691790 sessreg: upgrade 1.1.3 -> 1.1.4
Drop 0001-Makefile.am-Error-Fix.patch - the error doesn't seem
to happen anymore.

License-Update: Removed the words "All rights reserved" from Oracle
copyright notices.

Shortlog:
Remove "All rights reserved" from Oracle copyright notices
meson: Add option to build with meson
Add --help and --version options
Improve man page formatting
man pages: fix warnings from `mandoc -T lint` and `groff -rCHECKSTYLE=10`

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-20 23:34:20 -08:00
Eric Meyers 19ae3c84e2 redis: Add redis 8.0.0 recipe
Adding base 8.0.0 recipe for redis without any module configuration.

See https://github.com/redis/redis/tree/8.0.0?tab=readme-ov-file#redis-data-types-processing-engines-and-capabilities

for more details.

Signed-off-by: Eric Meyers <eric.meyers@arthrex.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-20 23:34:20 -08:00
Markus Volk d3a8ddcaaa snapper: update 0.12.2 -> 0.13.0
- Remove 0001-Fix-build-with-boost-1.89.patch. Seems to be fixed
  upstream
- Use manpages class

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-20 23:34:18 -08:00
Markus Volk 051eaf06fd libsdl3: update 3.2.30 -> 3.4.0
- dont explicitly disable xinput support to fix compilation if x11
  support is enabled (error: unknown type name 'XIRawEvent')
- add missing dependencies for libxcursor, xtst, xinput

In addition to lots of bug fixes and general system improvements, this release has some major themes of improved interoperability between the 3D GPU API and the 2D rendering API, improved Emscripten support, improved pen handling, and native support for PNG images.

Here is a full list of the API changes since the last release:
General:

    Added SDL_CreateAnimatedCursor() to create animated color cursors
    Added SDL_HINT_MOUSE_DPI_SCALE_CURSORS to automatically scale cursors based on the display scale
    Added SDL_SetWindowProgressState(), SDL_SetWindowProgressValue(), SDL_GetWindowProgressState(), and SDL_GetWindowProgressValue() to show progress in the window's taskbar icon on Windows and Linux
    Added GPU device creation properties to enable the GPU API on older hardware if you're not using these features:
        SDL_PROP_GPU_DEVICE_CREATE_FEATURE_CLIP_DISTANCE_BOOLEAN
        SDL_PROP_GPU_DEVICE_CREATE_FEATURE_DEPTH_CLAMPING_BOOLEAN
        SDL_PROP_GPU_DEVICE_CREATE_FEATURE_INDIRECT_DRAW_FIRST_INSTANCE_BOOLEAN
        SDL_PROP_GPU_DEVICE_CREATE_FEATURE_ANISOTROPY_BOOLEAN
        SDL_PROP_GPU_DEVICE_CREATE_D3D12_ALLOW_FEWER_RESOURCE_SLOTS_BOOLEAN
    Added SDL_PROP_GPU_DEVICE_CREATE_VULKAN_OPTIONS_POINTER to enable configuring Vulkan features when creating a GPU device
    Added SDL_PROP_GPU_DEVICE_CREATE_VULKAN_REQUIRE_HARDWARE_ACCELERATION_BOOLEAN to allow requiring Vulkan hardware acceleration when creating a GPU device
    Added SDL_GetGPUDeviceProperties() to query information from a GPU device:
        SDL_PROP_GPU_DEVICE_NAME_STRING
        SDL_PROP_GPU_DEVICE_DRIVER_NAME_STRING
        SDL_PROP_GPU_DEVICE_DRIVER_VERSION_STRING
        SDL_PROP_GPU_DEVICE_DRIVER_INFO_STRING
    Added SDL_GetPixelFormatFromGPUTextureFormat() and SDL_GetGPUTextureFormatFromPixelFormat()
    Added SDL_CreateGPURenderer() and SDL_GetGPURendererDevice() to create a 2D renderer for use with GPU rendering.
    Added SDL_CreateGPURenderState(), SDL_SetGPURenderStateFragmentUniforms(), SDL_SetGPURenderState(), and SDL_DestroyGPURenderState() to use fragment shaders with a GPU 2D renderer
    Added SDL_PROP_TEXTURE_CREATE_GPU_TEXTURE_POINTER to create a 2D texture from an existing GPU texture
    Added SDL_PROP_TEXTURE_GPU_TEXTURE_POINTER to get the GPU texture from a 2D texture when using the GPU 2D renderer
    Added support for YUV textures and HDR colorspaces to the GPU 2D renderer
    Added support for textures with palettes, and SDL_GetTexturePalette() and SDL_SetTexturePalette() to interact with them
    Added SDL_RenderTexture9GridTiled() to do tiled instead of stretched 9-grid texture rendering
    Added SDL_GetDefaultTextureScaleMode() and SDL_SetDefaultTextureScaleMode() to set the texture scale mode for new textures
    Added SDL_GetRenderTextureAddressMode() and SDL_SetRenderTextureAddressMode() to change the texture addressing mode
    Added SDL_TEXTURE_ADDRESS_WRAP to allow wrapping of textures if the renderer has SDL_PROP_RENDERER_TEXTURE_WRAPPING_BOOLEAN set
    The default YUV colorspace is BT.601 limited range, for compatibility with SDL2
    Added SDL_SCALEMODE_PIXELART as an improved scaling algorithm for pixel art without introducing blurring
    Added SDL_FLIP_HORIZONTAL_AND_VERTICAL to flip a surface both horizontally and vertically
    Added SDL_LoadPNG(), SDL_LoadPNG_IO(), SDL_SavePNG(), and SDL_SavePNG_IO() to load and save PNG images
    Added SDL_LoadSurface() and SDL_LoadSurface_IO() to detect BMP and PNG formats and load them as surfaces
    Added SDL_PROP_SURFACE_ROTATION_FLOAT to indicate the rotation needed to display camera images upright
    Added SDL_RotateSurface() to create a rotated copy of a surface
    SDL_EVENT_WINDOW_EXPOSED now sets data1 to true if it is sent during live resizing
    Added SDL_EVENT_DISPLAY_USABLE_BOUNDS_CHANGED, which is sent when the usable desktop bounds change
    Added SDL_EVENT_SCREEN_KEYBOARD_SHOWN, which is sent when the on-screen keyboard has been shown
    Added SDL_EVENT_SCREEN_KEYBOARD_HIDDEN, which is sent when the on-screen keyboard has been hidden
    Added pinch gesture events: SDL_EVENT_PINCH_BEGIN, SDL_EVENT_PINCH_UPDATE, SDL_EVENT_PINCH_END
    SDL_EVENT_AUDIO_DEVICE_ADDED will be sent during initialization for each audio device
    SDL_GetCameraPermissionState() returns SDL_CameraPermissionState instead of int
    Added SDL_PutAudioStreamDataNoCopy() to do more efficient audio stream processing in some cases
    Added SDL_PutAudioStreamPlanarData() to add planar audio data instead of interleaved data to an audio stream
    Added SDL_HINT_AUDIO_DEVICE_RAW_STREAM to signal that the OS shouldn't do further audio processing, useful for applications that handle noise canceling, etc.
    Added SDL_PROP_AUDIOSTREAM_AUTO_CLEANUP_BOOLEAN to allow streams that persist beyond the audio subsystem lifetime.
    Added enhanced support for 8BitDo controllers
    Added enhanced support for FlyDigi controllers
    Added enhanced support for Hand Held Legend SInput controllers
    Added support for wired Nintendo Switch 2 controllers when built with libusb
    Added SDL_hid_get_properties() to associate SDL properties with HID devices
    Added SDL_PROP_HIDAPI_LIBUSB_DEVICE_HANDLE_POINTER to query the libusb handle from an SDL_hid_device, if it's been opened with libusb
    Added SDL_SetRelativeMouseTransform() to add custom mouse input transformation
    Added SDL_GetPenDeviceType() to determine whether a pen is on the screen or on a separate touchpad
    SDL_HINT_MAIN_CALLBACK_RATE may be set to a floating point callback rate
    Added SDL_GetEventDescription() to get an English description of an event, suitable for logging
    Added SDL_PROP_IOSTREAM_MEMORY_FREE_FUNC_POINTER to allow custom freeing of the memory used by SDL_IOFromMem() and SDL_IOFromConstMem()
    Added SDL_PROP_PROCESS_CREATE_WORKING_DIRECTORY_STRING to set the working directory for new processes
    Added verbose log output when the DEBUG_INVOCATION environment variable is set to "1"
    Added SDL_AddAtomicU32()
    Added SDL_GetSystemPageSize() to get the system page size
    Added SDL_ALIGNED() to signal that data should have a specific alignment

Windows:

    Added SDL_HINT_RENDER_DIRECT3D11_WARP to enable D3D11 software rasterization
    Using SDL_InsertGPUDebugLabel(), SDL_PushGPUDebugGroup(), and SDL_PopGPUDebugGroup() requires WinPixEventRuntime.dll to be in your PATH or in the same directory as your executable
    Added SDL_PROP_DISPLAY_WINDOWS_HMONITOR_POINTER so you can query the HMONITOR associated with a display
    SDL_HINT_AUDIO_DEVICE_STREAM_ROLE is used by the WASAPI audio driver to set the audio stream category
    Added SDL_HINT_AUDIO_DEVICE_RAW_STREAM to signal whether the OS audio driver should do additional signal processing
    Added SDL_HINT_WINDOWS_RAW_KEYBOARD_EXCLUDE_HOTKEYS to allow disabling some system hotkeys when in raw input mode
    SDL_HINT_WINDOWS_GAMEINPUT is disabled by default

macOS:

    Added SDL_HINT_MAC_PRESS_AND_HOLD to control whether holding down a key will repeat the pressed key or open the accents menu

Linux:

    Added atomic support for KMSDRM
    Added SDL_HINT_KMSDRM_ATOMIC to control whether KMSDRM will use atomic functionality
    Added SDL_PROP_DISPLAY_WAYLAND_WL_OUTPUT_POINTER so you can query the wl_output associated with a display

Emscripten:

    Added SDL_WINDOW_FILL_DOCUMENT to indicate that windows expand to fill the whole browser window
    Added SDL_SetWindowFillDocument() to change whether windows expand to fill the whole browser window
    Added SDL_PROP_WINDOW_CREATE_EMSCRIPTEN_CANVAS_ID_STRING to allow setting the SDL canvas ID, and SDL_PROP_WINDOW_EMSCRIPTEN_CANVAS_ID_STRING to query it on existing windows
    Added SDL_PROP_WINDOW_CREATE_EMSCRIPTEN_KEYBOARD_ELEMENT_STRING to specify where keyboard input is bound, and SDL_PROP_WINDOW_EMSCRIPTEN_KEYBOARD_ELEMENT_STRING to query it on existing windows

iOS:

    SDL now supports window scenes, fixing the warning "CLIENT OF UIKIT REQUIRES UPDATE"
    Added SDL_PROP_WINDOW_CREATE_WINDOWSCENE_POINTER to specify the window scene for a window

visionOS:

    The default refresh rate has been increased to 90Hz
    SDL_SetWindowSize() changes the size of the window on Vision Pro headsets

PlayStation 2:

    Added the following hints to control the display parameters: SDL_HINT_PS2_GS_WIDTH, SDL_HINT_PS2_GS_HEIGHT, SDL_HINT_PS2_GS_PROGRESSIVE, SDL_HINT_PS2_GS_MODE

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-20 23:34:18 -08:00
Markus Volk eb4dab9818 libsdl2-compat: update 2.32.62 -> 2.32.64
- fix license checkksum: Copyright year has been changed

This is a stable bugfix release, with the following changes:

    Fixed surface memory leak in some circumstances
    Fixed mouse grab not persisting past window recreation
    Fixed picking the correct fullscreen resolution

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-20 23:34:18 -08:00
Markus Volk 0d686b2c5b libsdl3-image: update 3.2.6 -> 3.4.0
- Fix license checksum: Copyright year has been changed
- Add support for av1 and jxl

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-20 23:34:17 -08:00
Ankur Tyagi 87f62c8910 postgresql: upgrade 17.7 -> 17.8
License-Update: Update license year to 2026

Refreshed patches for version 17.8

Includes fix for CVE-2026-2003, CVE-2026-2004, CVE-2026-2005, CVE-2026-2006

Release Notes:
https://www.postgresql.org/docs/release/17.8/

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-20 23:34:17 -08:00
Ankur Tyagi 7f3d7b7adb libjxl: upgrade 0.11.1 -> 0.11.2
- fix tile dimension in low memory rendering pipeline (CVE-2025-12474)
- fix number of channels for gray-to-gray color transform (CVE-2026-1837)
- djxl: reject decoding JXL files if "packed" representation size overflows
    size_t

https://github.com/libjxl/libjxl/releases/tag/v0.11.2

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-20 23:34:17 -08:00
Frede Hoey Braendstrup ff397db3d1 dbus-cxx: update 2.6.0 -> 2.6.1
Changelog from upstream:

Some minor fixes for code generation. Qt6 is now properly detected.

Signed-off-by: Frede Hoey Braendstrup <frederikbraendstrup@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-20 23:34:17 -08:00
Adam Duskett e19775fba8 libtoml11: move SRCREV below SRC_URI
According to the recipe style guide, SRCREV should be placed
below SRC_URI.

Signed-off-by: Adam Duskett <adam.duskett@amarulasolutions.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-17 22:42:42 -08:00
Adam Duskett 4e105b2749 libtoml11: add a BBCLASSEXTEND
A native version of libtoml11 may be needed for recipes such
as dnf5 in the future. Add it now.

Signed-off-by: Adam Duskett <adam.duskett@amarulasolutions.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-17 22:42:42 -08:00
Adam Duskett 4eefeb3357 libtoml11: add a cve_product
Signed-off-by: Adam Duskett <adam.duskett@amarulasolutions.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-17 22:42:41 -08:00
Adam Duskett 4c7aaad52d libtoml11: Add a bugtracker url
Signed-off-by: Adam Duskett <adam.duskett@amarulasolutions.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-17 22:42:41 -08:00
Adam Duskett ce96911f68 libtoml11: check PTEST_ENABLED instead of DISTRO_FEATURES
Checking for PTEST_ENABLED 1 is the preferred method for enabling
and disabling ptests for packages.

Signed-off-by: Adam Duskett <adam.duskett@amarulasolutions.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-17 22:42:41 -08:00
Adam Duskett 6a5cb4697b libtoml11: use gitsm for SRC_URI
Using gitsm also allows for the revmoval of SRCREV_json and SRCREV_doctest.

Signed-off-by: Adam Duskett <adam.duskett@amarulasolutions.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-17 22:42:41 -08:00
Adam Duskett 2681b16e8a libtoml11/files/0001-Remove-whitespace-in-operator.patch: change upstream-status
Change "Submitted" in 0001-Remove-whitespace-in-operator.patch to "Backport"
with the appropraite link to the relevant commit hash.

Signed-off-by: Adam Duskett <adam.duskett@amarulasolutions.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-17 22:42:41 -08:00
Adam Duskett e1d3b9598e libtoml11/files/run-ptest: cleanup
Shellcheck -oall warnings fixed:
  - exit 1 if `cd tests` failes (SC2164)

  - Double quote `./${atest}` to prevent globbing and word splitting. (SC2086)

  - Check the test exit code directly intead of using $? (SC2181)

Other fixes:
  - The shebang sould traditionally be /usr/bin/env sh in case
    sh is not located in /bin.

  - Do not remove tests.log for every test.

Signed-off-by: Adam Duskett <adam.duskett@amarulasolutions.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-17 22:42:41 -08:00