Commit Graph
41362 Commits
Author SHA1 Message Date
Khem Raj 699a8dd232 ndpi, ntopng: upgrade to 6.0 and 7.0
ndpi: upgrade 5.0 -> 6.0
- Drop 0001-configure-Stop-embedding-pwd-at-configure-time.patch,
  NDPI_BASE_DIR is gone upstream.

ntopng: upgrade 6.6 -> 7.0
- Drop 0001-Fix-build-with-OpenSSL-4.0.patch, CVE-2026-84990.patch and
  CVE-2026-86090-CVE-2026-86091.patch, included in this release.
- Refresh the remaining patches.

They are upgraded together as ntopng 7.0 is built against nDPI 6.0.

AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-11 22:46:06 -08:00
Khem Raj 8ab3ce42a8 drbd-utils: upgrade 9.34.0 -> 9.35.0
Update the drbd-headers submodule revision to the one used by the
v9.35.0 tag and refresh 0001-fix-the-hardcoded-legacy-helper-path.patch.

AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-11 22:46:06 -08:00
Khem Raj 722f5f532e tailscale: upgrade 1.104.1 -> 1.104.6
Regenerate tailscale-go-mods.inc and tailscale-licenses.inc with
bitbake -c update_modules.

AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-11 22:46:06 -08:00
Khem Raj 08a571906d samba: upgrade 4.23.11 -> 4.25.1
Drop the memset_explicit backports, included in this release, and
refresh 0003-Add-config-option-without-valgrind.patch.

The bundled talloc, tevent and tdb versions are unchanged (2.5.0,
0.17.2, 1.4.15).

AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-11 22:46:06 -08:00
Khem Raj cba9b18c11 vsomeip: upgrade 3.7.3 -> 3.8.0
Refresh 0001-Fix-pkgconfig-dir-for-multilib.patch through
0005-Do-not-treat-warnings-as-errors-with-clang.patch; the memory tests
were rewritten and no longer need the scanf fix.

The policy manager unit test now gets its build directory from a CMake
compile definition instead of policy_manager_impl_unit_test_macro.hpp,
so point that at the installed test directory to avoid embedding ${B}.

AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-11 22:46:06 -08:00
Khem Raj 8a17d40935 open-vm-tools: upgrade 13.0.10 -> 13.1.0
gtk2 support was removed and gtk4 added, and --with-gtkmm was split
into gtkmm3/gtkmm4; adjust the configure options and use gtk+3 for x11.

AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-11 22:46:05 -08:00
Khem Raj 45854336cb kronosnet: upgrade 1.33 -> 1.36
The wireshark dissector is now built by default and needs
wireshark >= 4.6.0; add a wireshark PACKAGECONFIG, off by default.

AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-11 22:46:05 -08:00
Khem Raj bbfc9df149 phodav: upgrade 3.0 -> 3.2
gtk-doc was replaced by gi-docgen, drop the gtk-doc class and disable
the new docs, introspection and litmus options. Set the new sysusers and
udev rules directories, and derive the download directory from PV.

AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-11 22:46:05 -08:00
Khem Raj 7c926d1ca9 stunnel: upgrade 5.80 -> 5.82
Refresh fix-openssl-no-des.patch.

AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-11 22:46:05 -08:00
Khem Raj 841f3531ce autofs: upgrade 5.1.9 -> 5.2.0
Drop 0010-autofs-5.1.9-Fix-incompatible-function-pointer-types.patch,
included in this release, and refresh
0006-Do-not-hardcode-path-for-pkg.m4.patch.

AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-11 22:46:05 -08:00
Khem Raj b9263d0be3 corosync: upgrade 3.1.10 -> 3.2.0
Drop CVE-2026-35091.patch and CVE-2026-35092.patch, included in this
release.

AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-11 22:46:05 -08:00
Khem Raj 38fae16c9a chrony: upgrade 4.8 -> 4.9
Refresh arm_eabi.patch.

AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-11 22:46:04 -08:00
Khem Raj 82ada511b9 ndisc6: upgrade 1.0.8 -> 1.0.9
Refresh 0001-Remove-use-of-variables-indicating-buildtime-informa.patch,
upstream already dropped the build date and host name; only the configure
invocation remains.

AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-11 22:46:04 -08:00
Khem Raj 54ec39f13d ettercap: upgrade 0.8.4.1 -> 0.8.5.1
Refresh 0001-ec.h-do-not-strip-a-pre-existing-_GNU_SOURCE-define.patch.

AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-11 22:46:04 -08:00
Khem Raj 377c4a7268 tgt: upgrade 1.0.90 -> 1.0.98
Drop musl-__wordsize.patch, __WORDSIZE is no longer used.

AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-11 22:46:04 -08:00
Khem Raj 20193dfa90 rdma-core: upgrade 65.0 -> 66.0
COPYING.GPL2 was updated to the current GPL-2.0 text (FSF address
replaced by a URL); the license is unchanged.

AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-11 22:46:04 -08:00
Khem Raj e7bf18b946 weechat: upgrade 4.10.2 -> 4.10.4
AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-11 22:46:04 -08:00
Khem Raj 94efb92a8a networkmanager: upgrade 1.58.0 -> 1.58.1
AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-11 22:46:04 -08:00
Khem Raj f5b2328376 nbdkit: upgrade 1.49.4 -> 1.49.5
AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-11 22:46:03 -08:00
Khem Raj 0977b69f8e libcpr: upgrade 1.14.2 -> 1.15.1
AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-11 22:46:03 -08:00
Khem Raj fcfa6a32a4 htpdate: upgrade 2.0.2 -> 2.1.0
AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-11 22:46:03 -08:00
Khem Raj bdd9089a0a frr: upgrade 10.6.2 -> 10.7.1
AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-11 22:46:03 -08:00
Khem Raj 2ee33fba32 bpftool-native: Upgrade 6.16 -> 7.3.4
Drop patches which are included in this release:
0001-libbpf-Fix-Wdiscarded-qualifiers-under-C23.patch
0002-tools-linux-types.h-Add-128-bit-integer-types-for-ar.patch

Derive the kernel.org v<major>.x directory from PV.

AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-11 18:21:48 -08:00
Khem Raj 6482e70bad bpftool-native: Fix build on arm64 hosts with linux-libc-dev 7.3
Debian 13 now ships linux-libc-dev 7.3, where the arm64 UAPI headers
(asm/ptrace.h, asm/sigcontext.h) use __u128 instead of __uint128_t.
bpftool-native builds against the host headers but puts
tools/include ahead of them, and the 6.16 tools linux/types.h does not
define __u128:

/usr/lib/linux/uapi/arm64/asm/sigcontext.h:81:9: error: unknown type name '__u128'; did you mean '__u32'?

Backport the upstream tools/include/linux/types.h fix that adds the
128-bit types.

AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-11 18:21:48 -08:00
Jason Schonberg 167ee80f35 nodejs: upgrade 24.22.2 -> 24.22.3
This is the November 2026 security release.

  7 high severity issues.
  6 medium severity issues.
  3 low severity issues.

High severity issues.
  CVE-2026-123863
  CVE-2026-123864
  CVE-2026-123865
  CVE-2026-123866
  CVE-2026-126051
  CVE-2026-123872
  CVE-2026-123874

Medium severity issues.
  CVE-2026-123828
  CVE-2026-123867
  CVE-2026-123868
  CVE-2026-123871
  CVE-2026-123877
  CVE-2026-123875

Low severity issues.
  CVE-2026-123829
  CVE-2026-123862
  CVE-2026-106071

https://nodejs.org/en/blog/vulnerability/november-2026-security-releases

Changelog: https://github.com/nodejs/node/releases/tag/v24.22.3

Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-11 18:20:15 -08:00
Khem Raj 3a033c219c fastfetch: Fix build with lld
Since the link type was switched to dynamic, fastfetch adds
-Wl,--copy-dt-needed-entries to the exe linker flags. LLD does not
support it, so every CMake check that links fails; utmpx.h is then
reported missing and the utmp.h fallback breaks the build:

error: use of undeclared identifier 'endutxent'; did you mean 'endutent'?

Only add the flag when the linker accepts it, map endutxent in the
utmp.h fallback as well, and link libxcb and libX11 explicitly since
LLD cannot pick them up through xcb-randr/xrandr DT_NEEDED entries.

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
AI-Generated: Uses Claude Code
2026-11-11 18:20:14 -08:00
Tafil Avdyli 3b9df651ac fastfetch: upgrade 2.70.0 -> 2.71.0
Full changelog: https://github.com/fastfetch-cli/fastfetch/blob/2.71.0/CHANGELOG.md

Signed-off-by: Tafil Avdyli <tafil@tafhub.de>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-11 18:20:14 -08:00
Tafil Avdyli a20e0d3695 fastfetch: drop sixel packageconfig
The embedded 3rd party sixel coder is meant for Windows, macOS and
Android. The option has no effect on Linux.

Signed-off-by: Tafil Avdyli <tafil@tafhub.de>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-11 18:20:14 -08:00
Tafil Avdyli 5f46731ff9 fastfetch: set link type to dynamic
The default option is dlopen. Switch to dynamic to allow Yocto's
shlibdeps to generate runtime dependencies automatically to avoid
missing libraries in the target image.

Signed-off-by: Tafil Avdyli <tafil@tafhub.de>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-11 18:20:14 -08:00
Khem Raj 9f8509f420 pgpool2: Do not embed recipe sysroot libdir in pgpool_setup
configure takes PGSQL_LIB_DIR from pg_config, which points into the
recipe sysroot. The pgpool_setup script uses it as its default
LD_LIBRARY_PATH, triggering the buildpaths QA error:

File /usr/bin/pgpool_setup in package pgpool2 contains reference to TMPDIR [buildpaths]

Override PGSQL_LIB_DIR with ${libdir} at make time. The link flags use
the configure-substituted @PGSQL_LIB_DIR@, so linking against libpq in
the sysroot is unaffected; only the generated scripts pick up the
override.

AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-11 18:20:14 -08:00
Babanpreet Singh af05e0e2d1 pg-cron: add recipe
pg_cron is a cron-based job scheduler that runs inside PostgreSQL.

Signed-off-by: Babanpreet Singh <bbnpreetsingh@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-11 18:20:14 -08:00
Babanpreet Singh b114ccb74a pgxs.bbclass: add class for PostgreSQL extensions
Extensions that build with PGXS need the same dependency, make
arguments and FILES. Put them in a class so a recipe only has to
inherit pgxs.

Signed-off-by: Babanpreet Singh <bbnpreetsingh@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-11 18:20:13 -08:00
Babanpreet Singh 8521c1f634 postgresql: make PGXS usable for cross-building extensions
Extensions built with PGXS need pg_config and Makefile.global, but
pg_config is a target binary and the staged Makefile.global has its
paths stripped.

Stage a shell pg_config in crossscripts and fix up the staged PGXS
makefiles so extensions can be built against the sysroot.

Signed-off-by: Babanpreet Singh <bbnpreetsingh@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-11 18:20:13 -08:00
Peter Marko beba6d25fd libcoap: correct license
Commit fd97bae312 wrongly replaced
BSD-1-Clause by BSD-3-Clause instead of just adding BSD-3-Clause.
It's commit message says "add", not "replace".

[1] shows it's still needed.

Correct this by re-adding BSD-1-Clause.

[1] https://github.com/obgm/libcoap/blob/v4.3.5b/LICENSE#L53

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-11 18:20:13 -08:00
Ricardo Salveti e52b01dfe4 cpupower: split cpufreq-bench into cpupower-bench
The kernel's cpupower Makefile builds cpufreq-bench by default and
installs its cpufreq-bench_plot.sh helper, a bash script, into
${bindir}. That makes the whole cpupower package RDEPEND on bash,
which pulls bash into images that only want the cpupower tool, such
as busybox based initramfs images.

Move cpufreq-bench, its plot script and its configuration file to
cpupower-bench and carry the bash dependency there. Images that use
cpufreq-bench now need to install cpupower-bench, so switch the
benchmarks packagegroup to it.

AI-Generated: Uses Claude Code
Signed-off-by: Ricardo Salveti <ricardo.salveti@oss.qualcomm.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-11 18:20:13 -08:00
Khem Raj 1fe53601f7 cpupower: Install systemd unit into systemd_system_unitdir
The kernel cpupower Makefile installs cpupower.service into a hardcoded
/usr/lib/systemd/system, while the systemd package ships
${systemd_unitdir}. On distros without usrmerge (e.g. poky) these
differ, and on sysvinit distros the unit is not wanted at all, causing
installed-vs-shipped QA errors.

Pass unitdir=${systemd_system_unitdir} so the unit lands where OE
expects, and set SYSTEMD=false when systemd is not in DISTRO_FEATURES
so the unit is not installed.

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-11 18:20:13 -08:00
Khem Raj 26c1d52acb cpufrequtils: Remove obsolete recipe
cpufrequtils has not been maintained for years and has been
superseded by cpupower, which lives in the kernel tree under
tools/power/cpupower and is already packaged in meta-oe. cpupower
covers the same functionality (cpufreq-info -> cpupower frequency-info,
cpufreq-set -> cpupower frequency-set) and is built from the running
kernel's sources, so it stays in sync with the kernel's cpufreq
interfaces.

Switch packagegroup-basic to cpupower, and drop cpufrequtils from
packagegroup-meta-oe-bsp, since packagegroup-meta-oe already pulls in
cpupower. Users should install cpupower instead.

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-11 18:20:13 -08:00
Khem Raj df8e11bdb6 libhugetlbfs: Fix linking tests with lld
ld.hugetlbfs runs $LD as the real linker and adds the GNU ld only
-Ttext-segment option for --hugetlbfs-align links on arm/aarch64, i386 and
ppc64. Now that LD is ld.lld this fails with

  ld.lld: error: -Ttext-segment is not supported. Use --image-base if you intend to set the base address

Teach ld.hugetlbfs to use --image-base when the linker is LLD.

AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-11 18:20:12 -08:00
Leon Anavi 8572efb2a3 python3-zeroconf: Upgrade 0.153.0 -> 0.154.0
Upgrade to release 0.154.0:

- Build armv7l wheels for Python 3.15

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-10 18:09:25 -08:00
Leon Anavi bc8f72afd6 python3-typer: Upgrade 0.27.3 -> 0.28.0
Upgrade to release 0.28.0:

Fixes:

- Ensure that the default option name is not changed by setting a
  metavar.

Docs:

- Enable Ruff formatting for Python in Markdown.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-10 18:09:25 -08:00
Leon Anavi 53a8968fac python3-truststore: Upgrade 0.10.4 -> 0.10.5
Upgrade to release 0.10.5:

- Take the context lock in wrap_bio() as wrap_socket() does
- Add validation for server_hostname and check_hostname for
  wrap_socket
- Add explicit support for Python 3.15
- Mitigate thread safety issues during handshakes

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-10 18:09:25 -08:00
Leon Anavi 2f2e5ec23c python3-telnetlib3: Upgrade 5.0.1 -> 5.0.2
Upgrade to release 5.0.2:

- fixes of decoding in read() functions

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-10 18:09:25 -08:00
Leon Anavi d804c2304d python3-svglib: Upgrade 2.3.3 -> 2.4.0
Upgrade to release 2.4.0:

Added:

- <textPath> is now supported: text follows the <path> named by its
  href or xlink:href, with startOffset (a length or a percentage)
  and text-anchor, and styled <tspan> children. ReportLab can't
  draw text along a path, so each glyph is placed and rotated
  individually, at the point of the path under its midpoint; glyphs
  beyond the end of the path are dropped. Only paths of the same
  document can be followed, and side, method, spacing and per-glyph
  dx/dy/rotate are not supported.
- The plain opacity property is now supported, as a presentation
  attribute, in style attributes and in <style> rules, including
  percentages. Opacity composes down the tree, so a shape at 0.5
  inside a group at 0.5 is drawn at 0.25. It is applied per shape,
  so overlapping shapes inside a translucent group show through
  each other, and images are not affected.
- The CSS font shorthand is now expanded into font-style,
  font-weight, font-size and font-family, in style attributes and
  in <style> rules. Invalid shorthands are ignored.

Removed:

- Dropped support for Python 3.9 (and PyPy 3.9). pip 26.2.2, the
  new minimum safe version, requires Python 3.10 or newer.
  requires-python is now >=3.10, the 3.9 classifier is gone, and CI
  no longer tests 3.9 or PyPy 3.9.

Tooling and housekeeping:

- CI now fails if a locked or installed dependency, or the uv
  binary, is below its minimum safe version
  (scripts/check_min_versions.py).
- CI runs the lowest supported Python, 3.10, next to 3.13, 3.15 and
  PyPy 3.11. Python 3.15 is declared supported (classifier and
  tox).
- make install installs the dev dependency group (it used the dev
  extra, which doesn't exist), make uninstall no longer passes an
  option that uv pip doesn't know, and make test-dist works:
  scripts/test-dist.sh builds the wheel and tests it in a clean
  virtual environment. New: make check-versions.
- tests/test_basic.py is split into modules by topic
  (test_paths.py, test_text.py, test_text_path.py, test_use.py,
  test_gradients.py, ...). The tests that download files carry the
  pytest marker network, so pytest -m "not network" (or make
  test-fast) skips them.
- tests/test_public_api.py records the names, signatures and class
  members of svglib, svglib.svglib, svglib.utils and svglib.fonts
  in tests/public_api.json, so that restructuring the modules can't
  silently change what user code can import.
- The READMEs and notes in demos/ and tests/ are Markdown now, and
  the testing instructions describe the current uv and Makefile
  based workflow.

Fixed:

- A style attribute or <style> rule whose value contains a colon or
  a semicolon, such as cursor: url(http://example.com/c.cur), auto
  or a data URL, no longer makes svg2rlg() fail with ValueError or
  truncates the value. Declarations are now parsed with tinycss2,
  malformed ones are skipped, and !important and comments are no
  longer part of the value.
- baseline-shift on text is now also read from style attributes and
  <style> rules, and a percentage is taken relative to the font
  size instead of being used as a length in user units. A value on
  an enclosing <g> does not affect the text, as the property is not
  inherited.
- stroke-dasharray values that SVG calls invalid (any negative
  length, or a list that sums to zero) no longer produce an invalid
  PDF dash pattern and raise ValueError while rendering; they give
  a solid line. none no longer relies on a swallowed exception, and
  an odd number of values is repeated once to make it even, as the
  specification requires.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-10 18:09:24 -08:00
Leon Anavi 17d038b7b7 python3-soupsieve: Upgrade 4.0 -> 4.0.1
Upgrade to release 4.0.1:

- FIX: Cache whether an element is or has a matching descendant
  when matching :has() to avoid quadratic time on deeply nested
  documents.
- FIX: Cache whether the parent matches when matching the child
  combinator (a > b) so it is matched once for all of its children,
  avoiding quadratic time when the parent is expensive, such as
  div:has(> p) > span.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-10 18:09:24 -08:00
Leon Anavi a58af704bf python3-sentry-sdk: Upgrade 2.73.0 -> 2.74.0
Upgrade to release 2.74.0:

New Features:

Anthropic:

- Record reasoning parts in streaming output
- Record reasoning parts in nonstreaming output

Other:

- (typesafe) Handle inline images

Bug Fixes:

Anthropic:

- Preserve cached _iterator property
- Stop unpacking output arrays

Other:

- (aiohttp) Leave existing baggage header alone if it has existing
  sentry- entries
- (boto3) Adapt to botocore no longer signing baggage
- (ci) Restrict pytest because of incompatibilities
- (falcon) Handle integer HTTP statuses and @sentrivana in #8139
- (sampling) Respect incoming sample rate if not explicitly
  overridden
- (tracing) Drop trailing comma when serializing baggage without
  third-party items and @pabloDeputter
- (wsgi) Stop overwriting server.address

Internal Changes:

Deps:

- Lock file maintenance
- Bump grpcio to 1.84.1 with @sentry-junior in #8136
- Bump uv to 0.13.5 with @sentry-junior in #8135
- Bump brotli to 1.2.1 with @sentry-junior in #8122

Other:

- (mcp) Remove unused select_mcp_transactions fixture with
  @sentry-junior in #8150
- (release) Bump craft to 3.9.0 and update config with
  @sentry-junior in #8181
- (sessions) Remove unused TERMINAL_SESSION_STATES constant with
  @sentry-junior in #8151
- (starlette) Remove unused \_serialize_request_body_data helper
- (toxgen) Remove unused get_file_hash() and get_last_updated()
  helpers
- (tracing) Remove unused base64_stripped regex
- (utils) Remove unused to_timestamp helper and epoch constant
- Upgrade sphinx and remove packaging upper bound
- Update test matrix with new releases (27/10)

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-10 18:09:24 -08:00
Leon Anavi 375d74b06f python3-regex: Upgrade 2026.9.29 -> 2026.11.9
Upgrade to release 2026.11.9:

- Git issue 633: TypeError from optimise() (unexpected keyword
  'in_set') for (?V1)[a&&[\PL\pL]] with IGNORECASE
- Git issue 632: AttributeError: 'AnyAll' object has no attribute
  'rebuild' for [^\d\D] with IGNORECASE
- Git issue 631: RuntimeError: invalid RE code when searching with
  (?r:(())a\G){i<2}
- Git issue 630: RuntimeError: invalid RE code for a fuzzy limit of
  2**32 or more
- Git issue 629: SEGV (NULL pointer dereference) in
  Match.fuzzy_changes with POSIX+ASCII+IGNORECASE flags

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-10 18:09:24 -08:00
Leon Anavi 62a10876db python3-pyperf: Upgrade 2.10.0 -> 2.11.0
Upgrade to release 2.11.0:

- Tachyon hook
- Add ability to register hook from code
- Hash pin GitHub Actions and add cooldown to Dependabot
- Add zizmor security linter
- docs: fix some typos
- Move Ruff to pre-commit to pin it
- Update Python versions
- Fix typo in warning message for sample stability
- refactor: Made _T_DIST_95_CONF_LEVELS a tuple because it's a
  constant
- Allow zero-valued memory metadata
- impr: Optimized the format_number function
- impr: Optimized the _common_metadata function
- Make psutil optional in emscripten platform
- Add --in-process mode support
- Drop support for EOL Python 3.10
- metadata: add cpu_quota (Linux cgroup CPU bandwidth limit)
- Add Runner.is_worker() helper
- Update docs for --in-process option
- Use CPU affinity and set process priority when using --in-process

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-10 18:09:24 -08:00
Leon Anavi 0992ce67a6 python3-pymisp: Upgrade 2.5.34.4 -> 3.0.0
Upgrade to release 3.0.0:

- Drop support for Python 3.10
- Add support for Python 3.15
- [high] fix: wait for the publish worker in
  test_search_publish_timestamp
- fix: [DataURLObject] keep commas in the data of non-base64 data
  URLs
- new: add sharing group blueprint management
- fix: [tools] Validation of mac-eui-64, mac-address and SHA256
  ssh-fingerprint values
- Feature/custom warninglists

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-10 18:09:24 -08:00
Leon Anavi ee23ac3af2 python3-py-serializable: Upgrade 2.1.0 -> 2.2.0
Upgrade to release 2.2.0:

Documentation:

- Chaneglog to pyproject

Features:

- Support python 3.15

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-10 18:09:23 -08:00
Leon Anavi f455bbbfbd python3-paho-mqtt: Upgrade 2.1.0 -> 2.2.0
Upgrade to release 2.2.0:

- Update supported Python versions. Drop support for Python 3.7 and
  3.8. Deprecation notice: next release is expected to drop Python
  3.9 and 3.10.
- Possible breaking change: Change some exceptions from ValueError
  to TypeError (in max_queued_messages_set and Client
  callback_api_version parameter) The breaking change is unlikely
  however, both exceptions are expected to only be raised with
  broken code (e.g. need to pass wrong type - not just wrong value).
- Type annotations fix: bytearray was missing as alternative of
  some payload
- Add drop_out_messages to discard outgoing message queue. This
  could be needed if broker lost the session
- Honor MQTTv5 Server Keep Alive from CONNACK Properties
- Fix an keepalive disconnection when receiving large payload
- Fix bug in inflight message tracking & QoS 2 message, which could
  result in negative counter
- Various reinforcement against corrupted or malformed packets
- Expose ReasonCode names as documentation said
- Fix broken reinitialise()

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-10 18:09:23 -08:00