Commit Graph

32478 Commits

Author SHA1 Message Date
Wang Mingyu
48bee5e6f7 python3-fsspec: upgrade 2024.10.0 -> 2024.12.0
Changelog:
==========
Enhancements
------------
- "exclusive" mode for writing
- "tree" text display of filesystem contents
- async wrapper for sync FSs
- new known implementation: tosfs
- consilidate block fetch requests

Fixes
------
- better webHDFS proxies
- syn FSs in referenceFS
- don't serialize file caches
- race condition in local ls()
- missing/nan references in parquet
- _un_chain kwargs
- async _cat_file in referenceFS

Other
------
- fallback implementation for _fetch_range

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-24 08:23:08 -08:00
Wang Mingyu
4c0904c295 python3-fastnumbers: upgrade 5.1.0 -> 5.1.1
Changelog:
  Add support for Python 3.13

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-24 08:23:08 -08:00
Wang Mingyu
0279106fd0 python3-fastjsonschema: upgrade 2.21.0 -> 2.21.1
Changelog:
===========
* Fixed ResourceWarning where file was not properly closed
* Fixed regexp for date format

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-24 08:23:08 -08:00
Wang Mingyu
d31a0a4324 python3-eth-utils: upgrade 5.0.0 -> 5.1.0
Changelog:
==========
Bugfixes
----------
- Correct error message in "from_wei" and "to_wei"
- Remove unused hexbytes dependency that is causing a cyclic dependency issue

Features
----------
- Removed "_BaseHasLogger" and "_BaseHasExtendedDebugLogger", and the "logger"
  attribute in the "HasLogger" and "HasExtendedDebugLogger" is type hinted directly.
- Add new humanize_hexstr function
- Add "memoryview" to accepted input type for "to_hex" , "to_int" , "to_bytes" , and "to_text"

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-24 08:23:08 -08:00
Wang Mingyu
05ad81a2b7 python3-eth-keyfile: upgrade 0.7.0 -> 0.8.0
Changelog:
 Add decode keyfile json v4

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-24 08:23:08 -08:00
Wang Mingyu
c2bc74aec5 python3-elementpath: upgrade 4.6.0 -> 4.7.0
Changelog:
==========
- Fix fragment argument usage
- Fix constructors nud() to skip argument check with XP31+ arrow operator

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-24 08:23:08 -08:00
Wang Mingyu
7eafc62373 python3-drgn: upgrade 0.0.29 -> 0.0.30
Changelog:
 https://github.com/osandov/drgn/releases/tag/v0.0.30

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-24 08:23:08 -08:00
Wang Mingyu
b4098d10d0 python3-cytoolz: upgrade 1.0.0 -> 1.0.1
Changelog:
  Add support for Python 3.13

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-24 08:23:08 -08:00
Wang Mingyu
6ab6892aaa python3-croniter: upgrade 5.0.1 -> 6.0.0
Changelog:
==========
- Announce for now that croniter dev is ended (CRA).
- Rework timestamp_to_datetime to use whatever timezone
- Make datetime_to_timestamp & timestamp_to_datetime public
- Fix EPOCH calculation in case of non UTC & 32 bits based systems
- Apply isort formatter
- Reintegrate test_speed
- Apply black formatter
- Code quality changes
  Remove unused _get_caller_globals_and_locals
  Remove single-use bad_length
  Remove unused days in proc_month
  Use field_index over i for readability
  Always use """ for docstrings
  Make helper instance methods that do not use self static
  Remove unusd call to sys.exc_info
  Remove unused ALPHAS
  Improve croniter.expand documentation

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-24 08:23:08 -08:00
Wang Mingyu
c9b540e9e4 python3-coverage: upgrade 7.6.2 -> 7.6.9
Changelog:
  Fix: Tomas Uribe fixed a performance problem in the XML report.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-24 08:23:08 -08:00
Wang Mingyu
036b3275b9 python3-cmd2: upgrade 2.5.7 -> 2.5.8
Changelog:
  Rolled back undocumented changes to printing functions introduced in 2.5.0.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-24 08:23:08 -08:00
Wang Mingyu
1e3a154a42 python3-cmake: upgrade 3.31.1 -> 3.31.2
Changelog:
=========
- [Bot] Update to CMake 3.31.2
- fix: tests
- chore: align minimum cmake version with the one of scikit-build-core
- fix: bootstrap build

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-24 08:23:08 -08:00
Wang Mingyu
bcf95e00ab python3-cassandra-driver: upgrade 3.29.1 -> 3.29.2
Changelog:
==========
Features
--------
- Convert to pytest for running unit and integration tests (PYTHON-1297)
- Add support for Cassandra 4.1.x and 5.0 releases to CI (PYTHON-1393)
- Extend driver vector support to arbitrary subtypes and fix handling of variable length types (PYTHON-1369)

Bug Fixes
----------
- Python NumpyProtocolHandler does not work with NumPy 1.24.0 or greater (PYTHON-1359)
- cibuildwheel appears to not be stripping Cython-generated shared objects (PYTHON-1387)
- Windows build for Python 3.12 compiled without libev support (PYTHON-1386)

Others
---------
- Update README.rst with badges for version and license (PR 1210)
- Remove dependency on old mock external module (PR 1201)
- Removed future print_function, division, and with and some pre 3.7 handling (PR 1208)
- Update geomet dependency (PR 1207)
- Remove problematic escape sequences in some docstrings to avoid SyntaxWarning in Python 3.12 (PR 1205)
- Use timezone-aware API to avoid deprecated warning

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-24 08:23:08 -08:00
Wang Mingyu
49f5c966ed python3-cantools: upgrade 39.4.13 -> 40.0.0
Changelog:
===========
- When parsing DBC, use long names in SignalGroup.signal_names to match Signal.name
- Raise Minimum Python Version to 3.9

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-24 08:23:08 -08:00
Wang Mingyu
8ebd6df974 python3-astroid: upgrade 3.3.5 -> 3.3.7
Changelog:
===========
- Fix inability to import collections.abc in python 3.13.1.
- Fix crash when typing._alias() call is missing arguments.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-24 08:23:08 -08:00
Wang Mingyu
e7f5c95b4b python3-apispec: upgrade 6.7.1 -> 6.8.0
Changelog:
=========
- Allow properties on $ref objects for OpenAPI 3.1
- Fix nullable nested schemas with metadata in OpenAPI 3.0

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-24 08:23:08 -08:00
Wang Mingyu
eb0acdca0f python3-apiflask: upgrade 2.2.1 -> 2.3.2
Changelog:
===========
- Fix response headers to be compliant with the OpenAPI specification for versions 3.0.0+
- Fix input data loading implementation when input validation is skipped
- Include input documentation in API spec when specifying validation=False on @input decorator
- Support skipping the validation for the request body with @input(validation=False)
- Enable CI test for Python 3.13.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-24 08:23:08 -08:00
Wang Mingyu
b8cab7bb9a python3-anyio: upgrade 4.6.2 -> 4.7.0
Changelog:
===========
- Updated TaskGroup to work with asyncio's eager task factories
- Added the wait_readable() and wait_writable() functions which will accept an
  object with a .fileno() method or an integer handle, and deprecated their now
  obsolete versions (wait_socket_readable() and wait_socket_writable())
- Changed EventAdapter (an Event with no bound async backend) to allow set() to
  work even before an async backend is bound to it
- Added support for wait_readable() and wait_writable() on ProactorEventLoop
  (used on asyncio + Windows by default)
- Fixed a misleading ValueError in the context of DNS failures
- Fixed the return type annotations of readinto() and readinto1() methods in the
  anyio.AsyncFile class
- Fixed TaskInfo.has_pending_cancellation() on asyncio returning false positives
  in cleanup code on Python >= 3.11
- Fixed cancelled cancel scopes on asyncio calling asyncio.Task.uncancel when
  propagating a CancelledError on exit to a cancelled parent scope1

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-24 08:23:08 -08:00
Wang Mingyu
681671b39e python3-aiosignal: upgrade 1.3.1 -> 1.3.2
Changelog:
===========
- Dropped Python 3.7 support.
- Dropped Python 3.8 support.
- Remove redundant wheel dep from pyproject.toml

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-24 08:23:08 -08:00
Wang Mingyu
595e25138b ostree: upgrade 2024.9 -> 2024.10
Changelog:
==========
- prepare-root: Add composefs.enabled=verity
- README: Update buildstream URL to new github repo
- composefs: Ensure buffer is suitably aligned for struct fsverity_digest
- core: Always sort incoming xattrs
- Fix ci
- sign-ed25519: Fix error message of validate_length
- rofiles-fuse: when fuse execution fails, rofiles-fuse still returns exit code 0
- libostree/deploy: enable composefs by default
- man: Note semantics combining root.transient with composefs.enabled

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-24 08:23:08 -08:00
Wang Mingyu
f7553ec450 nvmetcli: upgrade 0.7 -> 0.8
Changelog:
=============
- fix common misspellings from codespell project
- nvmetcli: set up the target only after the network is configured
- nvmetcli: fixup ana groupid setting for namespaces
- Documentation: fix typo
- nvmetcli: add a tcp example json
- nvmetcli: Correct xrange usage for py3
- nvmetcli: Allow different devices for make test
- nvmetcli: Report save name correctly
- test_nvmet.py: test_invalid_input fails for py3
- nvme.py: Make modprobe work for kmod lib too
- nvme.py: Sync the containing directory
- nvme.py: Explicit close is redundant
- nvmetcli: Improve IOError handling on restore
- README: Update URL for configshell-fb
- nvmetcli: don't remove ANA Group 1 on clear

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-24 08:23:08 -08:00
Wang Mingyu
d61b4aa452 nano: upgrade 8.2 -> 8.3
Changelog:
============
- A build failure with gcc-15 is fixed.
- Several translations were updated.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-24 08:23:08 -08:00
Wang Mingyu
9c04ed658b libsdl2-image: upgrade 2.8.2 -> 2.8.3
Changelog:
 Fixed handling of grayscale images with alpha

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-24 08:23:08 -08:00
Wang Mingyu
a496dc10a9 libcapture-tiny-perl: upgrade 0.48 -> 0.50
License-Update: add year and name of copyright owner

Changelog:
==========
- Stringify '$]' for far future compatibility.
- Fixed docs about custom files for capture

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-24 08:23:08 -08:00
Wang Mingyu
cd2e2bd0a5 ctags: upgrade 6.1.20241215.0 -> 6.1.20241222.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-24 08:23:08 -08:00
Yi Zhao
957d4f4e88 python3-pyproj: cleanup dependencies
Drop python3-cython-native from DEPENDS since we already inherit cython
bbclass.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-23 22:30:57 -08:00
Yi Zhao
e2ef7c12a9 python3-kivy: cleanup dependencies
Drop python3 and python3-cython-native from DEPENDS since we already
inherit setuptools3 and cython bbclasses.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-23 22:30:57 -08:00
Tom Geelen
56ecaf0821 python3-yarl: upgrade 1.18.0 -> 1.18.3
Signed-off-by: Tom Geelen <t.f.g.geelen@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-21 16:22:43 -08:00
Tom Geelen
5ce7d4c2ed python3-sqlalchemy: upgrade 2.0.35 -> 2.0.36
Signed-off-by: Tom Geelen <t.f.g.geelen@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-21 16:22:43 -08:00
Tom Geelen
2bb5cdcbb3 python3-pytest-asyncio: upgrade 0.23.6 -> 0.24.0
Signed-off-by: Tom Geelen <t.f.g.geelen@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-21 16:22:43 -08:00
Tom Geelen
97fe5a3abb python3-pyjwt: upgrade 2.9.0 -> 2.10.1
Signed-off-by: Tom Geelen <t.f.g.geelen@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-21 16:22:43 -08:00
Tom Geelen
55b7540e56 python3-propcache: upgrade 0.2.0 -> 0.2.1
Signed-off-by: Tom Geelen <t.f.g.geelen@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-21 16:22:42 -08:00
Tom Geelen
a7feabbc21 python3-pillow: upgrade 10.4.0 -> 11.0.0
Signed-off-by: Tom Geelen <t.f.g.geelen@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-21 16:22:42 -08:00
Tom Geelen
7f98c1aec1 python3-aiohttp: upgrade 3.11.8 -> 3.11.11
Signed-off-by: Tom Geelen <t.f.g.geelen@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-21 16:22:42 -08:00
Bartosz Golaszewski
d0b910a13f python3-gpiod: update v2.2.2 -> v2.2.3
Small bugfix release addressing a potential crash due to a bad usage of
PyDict_Next() in the C extension.

Signed-off-by: Bartosz Golaszewski <bartosz.golaszewski@linaro.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-20 19:47:57 -08:00
Peter Marko
46f22a10be weechat: upgrade 4.0.4 -> 4.5.0
Solves CVE-2024-46613

Update dependencies:
- remove openssl and icu
- add cjson and gettext-native

Remove patch to find gcrypt which is no longer needed.

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-20 19:47:57 -08:00
Peter Marko
2d3988f7b6 wireshark: upgrade 4.2.8 -> 4.2.9
Solves CVE-2024-9781

Release notes:
https://www.wireshark.org/docs/relnotes/wireshark-4.2.7.html
https://www.wireshark.org/docs/relnotes/wireshark-4.2.8.html

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-20 19:47:57 -08:00
Peter Marko
576b84263b sassc: ignore CVE-2022-43357
This CVE is fixed in current libsass recipe version.
So wrapper around it will also not show this problem.
It's usual usecase is to be statically linked with libsass which is
probably the reason why this is listed as vulnerable component.

[1] links [2] as issue tracker which points to [3] as fix.
[4] as base repository for the recipe is not involved and files from [3]
    are not present in this repository.

[1] https://nvd.nist.gov/vuln/detail/CVE-2022-43357
[2] https://github.com/sass/libsass/issues/3177
[3] https://github.com/sass/libsass/pull/3184
[4] https://github.com/sass/sassc/

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-20 19:47:56 -08:00
Peter Marko
607a446491 libmemcached: ignore CVE-2023-27478
Per [1] this is fixed by [2].
The commit message says that it is reverting feature added in:

$ git tag --no-contains d7a0084 | grep 1.0.18
1.0.18

This recipe is for the original memcached which is unmaintained now.
Hence the ignore instead of upgrade.

[1] https://nvd.nist.gov/vuln/detail/CVE-2023-27478
[2] https://github.com/awesomized/libmemcached/commit/48dcc61a

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-20 19:47:56 -08:00
Peter Marko
cdacbdf075 libmemcached: merge inc into bb
After removing old libmemcached recipe version, these is no reasons
anymore to have this split.
The memcached resurrected project uses cmake and different urls.

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-20 19:47:56 -08:00
Peter Marko
7d3c32d609 libmemcached: remove recipe for version 1.0.7
This no longer compiles with latest toolchains.

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-20 19:47:56 -08:00
Peter Marko
eea7188a24 php: upgrade 8.2.20 -> 8.2.26
Solves dozens of vulnerabilities. See
https://php.watch/versions/8.2/releases/8.2.21
https://php.watch/versions/8.2/releases/8.2.22
https://php.watch/versions/8.2/releases/8.2.23
https://php.watch/versions/8.2/releases/8.2.24
https://php.watch/versions/8.2/releases/8.2.25
https://php.watch/versions/8.2/releases/8.2.26

Removes CVE-2024-11233, CVE-2024-11234 and CVE-2024-11236 from
current cve metrics.

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-20 19:47:56 -08:00
Peter Marko
fdbec64d99 memcached: upgrade 1.6.17 -> 1.6.33
Solves CVE-2023-46852 and CVE-2023-46853.

Upgrade done via "devtool upgrade".

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-20 19:47:56 -08:00
Peter Marko
65cc05d6ee memcached: add UPSTREAM_CHECK_URI
Download URL is not listable so devtool upgrade fails.
Using homepage works as it contains link to latest release,

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-20 19:47:55 -08:00
Peter Marko
2a432397cd opensc: mark CVE-2024-8443 as fixed
NVD tracks this CVE as version-less.
Per [1] this is fixed by following commits:

$ git tag --contains b28a3cef416fcfb92fbb9ea7fd3c71df52c6c9fc
0.26.0
0.26.0-rc1
$ git tag --contains 02e847458369c08421fd2d5e9a16a5f272c2de9e
0.26.0
0.26.0-rc1

[1] https://github.com/OpenSC/OpenSC/wiki/CVE-2024-8443

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-20 19:47:55 -08:00
Peter Marko
0b3e7c1fd6 opensc: upgrade 0.25.1 -> 0.26.0
Solves CVE-2024-45615, CVE-2024-45616, CVE-2024-45617, CVE-2024-45618,
CVE-2024-45619 and CVE-2024-45620.

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-20 19:47:55 -08:00
Yogita Urade
54bbf1a630 postgresql: upgrade 16.4 -> 16.5
Includes fix for CVE-2024-10976, CVE-2024-10977, CVE-2024-10978
and CVE-2024-10979

Changelog:
https://www.postgresql.org/docs/release/16.5/

0003-configure.ac-bypass-autoconf-2.69-version-check.patch
Refreshed for 16.5

Signed-off-by: Yogita Urade <yogita.urade@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-20 19:47:55 -08:00
Khem Raj
e1a8da10f0 7zip: Fix build with clang
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-20 19:47:50 -08:00
Khem Raj
3f800ed93d xfce4-pulseaudio-plugin: Fix build with libwindowing 4.19.6
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-19 22:40:14 -08:00
Peter Marko
d8d45d9093 emlog: set CVE_PRODUCT
This will remove false-positive CVE-2024-50655 from reports.
There are different emlog components from other vendors around.

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-19 13:00:33 -08:00