Commit Graph
41074 Commits
Author SHA1 Message Date
Markus Volk 83dba73bee pipewire: upgrade 1.6.9 -> 1.6.11
Changelog:
https://gitlab.freedesktop.org/pipewire/pipewire/-/blob/1.6.11/NEWS?ref_type=tags

AI-Generated: Uses Claude Code (Claude Opus 5.5)
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-30 09:06:23 -07:00
Peter Kjellerstedt cf67981e76 glaze: Install the CMake files in /usr/lib/cmake/glaze (as intended)
Commit 2330468507 aspired to move the
CMake files from /usr/share/glaze to /usr/lib/cmake/glaze. However, all
it did was remove the FILES:${PN}-dev assignment, which resulted in the
CMake files ending up in the target package.

Actually set the install path for the CMake files using
-Dglaze_INSTALL_CMAKEDIR:PATH. For some odd reason, it needs to be
realtive, or the installed files will not work as intended when
cross-compiling.

Also remove -DCMAKE_INSTALL_PREFIX and -DDESTDIR from EXTRA_OECMAKE as
they are already set correctly by cmake.bbclass.

Finally, restore -Dglaze_DEVELOPER_MODE=OFF. It does not seem to affect
the installed files, but generates less CMake rules.

Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-30 09:06:23 -07:00
Khem Raj a5ec41f02d nodejs: Fix build with ICU 79
ICU 79.1 brings Unicode 18, which adds U+1DF95 LATIN SMALL LIGATURE
LONG S WITH DESCENDER S. It case-folds to U+00DF, so for the first time
the case closure of a BMP character contains a supplementary code point.
V8's gen-regexp-special-case build tool passes every member of that
closure to RegExpCaseFolding::Canonicalize(), which asserts a UTF-16
code unit, and aborts with

  # Check failed: ch <= 0xffff.

Backport the V8 fix, adapted to the V8 13.6 bundled with Node.js 24.

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-30 09:06:23 -07:00
Vaibhav Jindal a6e9171451 wrk: fix parallel build failure due to missing obj directory
The obj/bytecode.c rule in the wrk Makefile has no dependency on the
obj/ directory, so with parallel make luajit can run before obj/ has
been created and fails:

  LUAJIT src/wrk.lua
  luajit: .../obj/bytecode.c: No such file or directory
  make: *** [Makefile:64: obj/bytecode.c] Error 1

wrk only supports in-tree builds (relative obj/ and src/ paths, B = S),
so create ${S}/obj via do_compile[dirs], keeping ${S} last so make
still runs from the source directory.

Signed-off-by: Vaibhav Jindal <vaibjind@qti.qualcomm.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-29 21:28:12 -07:00
Ankur Tyagi e3028d4a4e lldpd: upgrade 1.0.22 -> 1.0.23
License-Update: use LICENSE file

Update SRC_URI to GitHub.

Changelog:
https://github.com/lldpd/lldpd/releases/tag/1.0.23

PTEST pass:
root@qemux86-64:~# ptest-runner lldpd
START: ptest-runner
2026-10-29T23:27
BEGIN: /usr/lib/lldpd/ptest
...
END: /usr/lib/lldpd/ptest
2026-10-29T23:27
STOP: ptest-runner
TOTAL: 1 FAIL: 0

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-29 19:59:14 -07:00
Ankur Tyagi 412e5ad575 proftpd: upgrade 1.3.9d -> 1.3.9e
Changelog:
https://github.com/proftpd/proftpd/blob/v1.3.9e/NEWS

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-29 19:59:14 -07:00
Ankur Tyagi c29f3e598a tcpreplay: upgrade 4.6.1 -> 4.6.2
License-Update: file moved to repo root and removed custom preamble[1]

Dropped patch that is now resolved in the upstream version.
Builds successfully with glibc and musl.

Changelog:
https://github.com/appneta/tcpreplay/releases/tag/v4.6.2

[1]https://github.com/appneta/tcpreplay/commit/8f93af9909025eca257b550df9eafd0bfb3bfab2

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-29 19:59:14 -07:00
Ankur Tyagi 1affde497f rtorrent: upgrade 0.16.26 -> 0.16.27
Dropped patch that is part of the upstream version.

Changelog:
https://github.com/rakshasa/rtorrent/releases/tag/v0.16.27

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-29 19:59:14 -07:00
Ankur Tyagi 66387ef2a1 libtorrent: upgrade 0.16.26 -> 0.16.27
Dropped patch that is part of the upstream version.

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-29 19:59:13 -07:00
Ankur Tyagi e0a8836e33 psqlodbc: upgrade 18.00.0002 -> 18.00.0005
Changelog:
https://github.com/postgresql-interfaces/psqlodbc/releases/tag/REL-18_00_0005

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-29 19:59:13 -07:00
Ankur Tyagi 0d8d580e40 ctags: upgrade 6.2.20260823.0 -> 6.2.20261011.0
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-29 19:59:13 -07:00
Ankur Tyagi cf46cc3b92 json-schema-validator: upgrade 2.4.0 -> 2.4.1
Changelog:
https://github.com/pboettch/json-schema-validator/releases/tag/2.4.1

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-29 19:59:13 -07:00
Khem Raj ffd143385c gflags: Fix buildpaths QA warning for gflags_completions.h
The usage example in gflags_completions.h hardcodes
/home/build/eng/bash/bash_completions.sh, a path from the original build
environment. It matches the HOME of the yoe build container, so
do_package_qa reports:

  File /usr/include/gflags/gflags_completions.h in package gflags-dev
  contains a reference to the build host HOME directory. [buildpaths]

Point the example at the installed gflags_completions.sh instead.

AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-29 19:59:13 -07:00
Leon Anavi 4fd8d4a415 python3-jsonpatch: Upgrade 1.33 -> 1.37
Upgrade to release 1.37:

- Clean up in-place output after write errors
- Reject invalid patch document containers
- Use UTF-8 for JSON command-line file I/O
- Handle source pointer objects in move location helpers

Fixes:

WARNING: python3-jsonpatch-1.37-r0 do_check_backend: QA Issue:
inherits setuptools3 but has pyproject.toml specifying backend
setuptools.build_meta, use the correct class [pep517-backend]

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-29 06:51:19 -07:00
Leon Anavi e808ada044 python3-multidict: Upgrade 6.7.1 -> 7.2.1
Upgrade to release 7.2.1:

- Fixed a regression in 7.2.0 where a subclass of MultiDictProxy or
  CIMultiDictProxy that converted its argument in its own
  __init__() raised TypeError before that __init__() ran; such a
  subclass got an empty multidict until its __init__() set the
  proxied one --.

Fix ptest-runner errors.

License-Update: Update LICENSE file. The license remains the same.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-29 06:51:19 -07:00
Leon Anavi 43b4415883 python3-platformdirs: Upgrade 4.10.1 -> 4.13.5
Upgrade to release 4.13.5:

- Publish a GitHub Release with changelog notes, a PyPI link, and a
  version comparison after each PyPI release.

Deselect failing tests from the run-ptest script for ptest-runner.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-29 06:51:18 -07:00
Leon Anavi 0c6d920aec python3-pyroute2: Upgrade 0.9.6 -> 0.9.7
Upgrade to release 0.9.7:

- ndb: basic support for XFRM interfaces
- ndb: basic support for object preload hooks
- ndb: basic support for prometheus metrics
- taskstats: fix name unregister_mask() -> deregister_mask()
- plan9: fids per session & inodes per FS
- ethtool: fix the off flags
- dhcp: support option 41 NIS servers
- wirouting: link features
- rtnl: support RTAX_CC_ALGO on route metrics
- rtnl: add missing NFT flags

Fix ptest-runner errors.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-29 06:51:18 -07:00
Ankur Tyagi 2af77e7bdc polkit: upgrade 127 -> 128
Dropped patched that are part of the upstream version.

Changelog:
https://github.com/polkit-org/polkit/blob/128/NEWS.md

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-29 06:51:18 -07:00
Ankur Tyagi 55c0213225 parallel: upgrade 20260922 -> 20261022
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-29 06:51:18 -07:00
Ankur Tyagi 1f8b35d870 neatvnc: upgrade 1.0.1 -> 1.0.3
Changelog:
https://github.com/any1/neatvnc/releases/tag/v1.0.2
https://github.com/any1/neatvnc/releases/tag/v1.0.3

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-29 06:51:18 -07:00
Ankur Tyagi 32c4929292 tesseract: upgrade 5.5.3 -> 5.5.4
Dropped patches that are part of the upstream version.

Changelog:
https://github.com/tesseract-ocr/tesseract/releases/tag/5.5.4

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-29 06:51:18 -07:00
Ankur Tyagi 7d5620e42a utf8proc: upgrade 2.11.3 -> 2.12.0
Changelog:
https://github.com/JuliaStrings/utf8proc/releases/tag/v2.12.0

PTEST pass:
root@qemux86-64:~# ptest-runner ut8proc
ut8proc ptest isn't available.
root@qemux86-64:~# ptest-runner utf8proc
START: ptest-runner
2026-10-29T09:15
BEGIN: /usr/lib/utf8proc/ptest
...
END: /usr/lib/utf8proc/ptest
2026-10-29T09:15
STOP: ptest-runner
TOTAL: 1 FAIL: 0

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-29 06:51:17 -07:00
Ankur Tyagi 5a218d7fb8 catch2: upgrade 3.16.0 -> 3.16.1
Changelog:
https://github.com/catchorg/Catch2/releases/tag/v3.16.1

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-29 06:51:17 -07:00
Ankur Tyagi c05facf29a zchunk: upgrade 1.5.4 -> 1.5.5
- Fix out-of-bounds read
- Harden multipart download parsing against malicious servers
- Harden chunk decompression and header parsing

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-29 06:51:17 -07:00
Martin Siegumfeldt 58a51944b5 luaunit: initial recipe
heavily inspired from version in meta-microblx

Signed-off-by: Martin Siegumfeldt <mns@gomspace.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-29 06:42:15 -07:00
Leon Anavi d760b45f64 python3-starlette: Upgrade 1.6.0 -> 1.10.0
Upgrade to release 1.10.0:

Leaner URL-encoded form parsing:

Starlette 1.10.0 parses URL-encoded forms with less memory and CPU, no
longer drops the last field when a stream ends early, and lets you
compare FormData that holds several uploads under one key.

- Forms with many fields parse faster and use less memory (#3724).
  FormParser builds each field in the parser callbacks instead of
  queueing every event and replaying it. On CodSpeed, 1000 fields
  went from 42.8 ms to 34.9 ms and from 63.5 KB to 54.5 KB, and the
  max_fields limit case went from 6,880 B to 864 B.
- The last field is kept when the request stream ends without an
  empty chunk (#3599). The parser is now finalized once the stream
  is exhausted, so custom streams that never yield a final b"" no
  longer lose their last field.
- FormData with repeated uploads can be compared (#3619). Comparing
  two FormData objects with several UploadFile values under the
  same key used to raise TypeError.

Behaviour changes:

- Multidict equality keeps the order of values under a repeated key
  (#3619). Keys can still appear in any order, but
  QueryParams("a=1&a=2") and QueryParams("a=2&a=1") are no longer
  equal, matching what getlist() returns.
- starlette.formparsers.FormMessage is deprecated (#3724). The
  parser no longer uses it, and FormParser.messages is gone.
  Calling FormMessage(...) emits a StarletteDeprecationWarning.

Routing and URL generation:

- Path parameter values that look like a placeholder are kept as
  they are (#3725). url_path_for("route", category="{id}", id="42")
  on /{category}/{id} now returns /{id}/42 instead of /42/42.
  Substitution also got faster, from 549 ns to 520 ns with two
  parameters and from 1,078 ns to 779 ns with five.
- Route matching does less work per request (#3665, #3722). Match
  members are compared by identity, cutting up to 4.9% of the
  instructions per dispatch in the routing benchmarks.
- WSGIMiddleware strips root_path only at a path segment boundary
  (#3718). A request to /application under a root_path of /app no
  longer becomes /lication.
- FloatConvertor reports NaN and infinity correctly (#3716). NaN
  was reported as a negative float.

Middleware, responses and config:

- Handled exceptions no longer keep requests alive (#3205).
  Starlette clears the traceback after an exception handler runs,
  so an exception instance reused across requests, such as a
  module-level HTTPException, no longer pins per-request objects in
  memory.
- Middlewares accept http.response.start without headers (#3721).
  BaseHTTPMiddleware, GZipMiddleware and SessionMiddleware default
  the omitted field to an empty list instead of raising KeyError.
- FileResponse ignores Range on methods other than GET and HEAD
  (#3679). A POST endpoint that returns a file now sends the full
  file, as RFC 9110 requires.
- Config strips one pair of matching outer quotes from env file
  values (#3720). KEY='say "hi"' now reads as say "hi" instead of
  say "hi.

Extend the ptest runtime dependencies to fix test cases from
tests/middleware/test_opentelemetry.py.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-29 06:42:15 -07:00
Leon Anavi 83f2087422 python3-opentelemetry-semantic-conventions: Add
Add recipe for python3-opentelemetry-semantic-conventions, release
1.45.1/0.66b1.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-29 06:42:15 -07:00
Leon Anavi 161297088b python3-opentelemetry-sdk: Add recipe
Add recipe for OpenTelemetry Python SDK, release 1.45.1:

- Fix thread leak bug in resource initialization logic for long
  running resource detectors

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-29 06:42:15 -07:00
Leon Anavi 7e5b9cd339 python3-opentelemetry-api: Add recipe
Add recipe for OpenTelemetry Python API, release 1.45.1:

- Make AnyValue and AttributeValue explicit type aliases
- Fix quadratic time parsing of the tracestate header and discard
  tracestate headers longer than 8192 characters

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-29 06:42:14 -07:00
Khem Raj 8ca93f5138 tvheadend: Stop using gitpkgv
PKGV = "4.3+git${GITPKGV}" counts the commits up to SRCREV, which is
always 1 with shallow clones, so successive SRCREVs only compare by hash
and gitpkgv warns:

  WARNING: tvheadend: Shallow cloning enabled - gitpkgv.bbclass will not
  generate sortable versions

Drop gitpkgv and let PKGV default to PV, to which the fetcher appends the
PR server AUTOINC and the revision (4.3+git0+cc60283368). The AUTOINC
starts below the commit count used so far, so bump PE to keep the upgrade
path from existing packages.

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-29 00:02:30 -07:00
Khem Raj 4e962d99ee freerdp: Stop using gitpkgv
SRCREV is the 2.11.8 tag, so PKGV = "${GITPKGVTAG}" only evaluates to
2.11.8 with a full clone. With shallow clones it becomes 0.0-1-g<hash>,
a downgrade, and gitpkgv warns:

  WARNING: freerdp: Shallow cloning enabled - gitpkgv.bbclass will not
  generate sortable versions

Drop gitpkgv and let PKGV default to PV.

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-29 00:02:30 -07:00
Khem Raj 5e771d8776 libusbmuxd: Stop using gitpkgv
Both recipes set PKGV = "${GITPKGVTAG}". With shallow clones there are no
tags or history, so the 2.1.1 recipe, whose SRCREV is exactly the 2.1.1
tag, got PKGV 0.0-1-g<hash>, a downgrade from 2.1.1, and gitpkgv warns:

  WARNING: libusbmuxd: Shallow cloning enabled - gitpkgv.bbclass will not
  generate sortable versions

Drop gitpkgv. PKGV now defaults to PV: 2.1.1 for the release recipe, and
2.0.2+git<AUTOINC>+<hash> for the git recipe.

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-29 00:02:30 -07:00
Khem Raj a1c5938abe usbmuxd: Stop using gitpkgv
PKGV = "${GITPKGVTAG}" relies on "git describe --tags --exact-match",
which never matches here since SRCREV is not a tag, so PKGV fell back to
0.0-<commit count>-g<hash>, below every release. With shallow clones the
count is always 1 as well, and gitpkgv warns:

  WARNING: usbmuxd: Shallow cloning enabled - gitpkgv.bbclass will not
  generate sortable versions

Drop gitpkgv and let PKGV default to PV, to which the fetcher appends the
PR server AUTOINC and the revision (1.1.2+git0+01c94c77f5). That is
sortable with or without shallow clones.

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-29 00:02:30 -07:00
Tafil Avdyli 0108591a59 fastfetch: upgrade 2.69.0 -> 2.70.0
Drop quickjs packageconfig. Previously 2.69.0 marked quickjs as
deprecated and in 2.70.0 the option has been removed.

Drop pulseaudio and ddcutil packageconfig. The libraries libpulse and
libddcutil are not used in the Linux build anymore and got removed.

Full changelog: https://github.com/fastfetch-cli/fastfetch/releases/tag/2.70.0

Signed-off-by: Tafil Avdyli <tafil@tafhub.de>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-29 00:02:29 -07:00
Nate Kent ba83448575 nng: upgrade 1.12.3 -> 2.1.0
This is a major release for NNG that includes breaking changes to the
API.

Changelogs:
* https://github.com/nanomsg/nng/releases/tag/v2.0.0
* https://github.com/nanomsg/nng/releases/tag/v2.1.0

Signed-off-by: Nate Kent <nate@nkent.net>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-29 00:02:29 -07:00
Nate Kent 8052a52464 nngpp: remove recipe
nngpp has not had any activity in the last six years and is not
compatible with NNG v2.

Signed-off-by: Nate Kent <nate@nkent.net>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-29 00:02:29 -07:00
Prasanth R 1eaaaaa445 crash: upgrade 9.0.2 -> 9.0.3
Fixes several commands on Linux 7.1 and 7.2, which OE-Core master
now ships as linux-yocto 7.2.
Update crash-memory-driver to the same revision.

AI-Generated: Uses Claude
Signed-off-by: Prasanth R <prasanth.r@lineo.co.jp>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-29 00:02:29 -07:00
Prasanth R 81945626d2 exiv2: upgrade 0.28.8 -> 0.28.9
Bug fix release.

Signed-off-by: Prasanth R <prasanth.r@lineo.co.jp>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-29 00:02:29 -07:00
Khem Raj eaa6d03a72 mariadb: Remove the pre-generated bison output from the source tree
The release tarball ships sql/yy_{mariadb,oracle}.{cc,hh} generated on
MariaDB's build host. The parser is regenerated in ${B} with
bison-native, but sql/*.cc include "yy_mariadb.hh", which resolves to the
stale copy next to them in ${S}. Its #line directives carry
/home/buildbot/tarball-docker/... into the debug info and libmariadbd.a,
which the buildpaths QA check reports since it matches the /home/build
HOME of the yoe build container:

  QA Issue: File /usr/lib/libmariadbd.a in package
  libmysqlclient-staticdev contains a reference to the build host HOME
  directory. [buildpaths]

It also silently mixes a header from one bison run with a parser from
another. Delete the shipped files before configuring so that only the
build's own bison output is used.

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-27 20:34:48 -07:00
Khem Raj bb95bbc4a9 kernel-selftest: Enable in world builds
Clang is now in core

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-27 13:15:21 -07:00
Johannes Schneider cd6cafd104 neatvnc: add nettle PACKAGECONFIG, disabled by default
The nettle crypto backend (RSA-AES security type) has no PACKAGECONFIG, so
meson auto-detects it from the sysroot: non-deterministic, nettle missing
from DEPENDS, and broken against nettle 4.0 (split sha.h, changed EAX
arity) which neatvnc 1.0.1 has not adopted.

Add the toggle with its nettle/hogweed/gmp deps and default it off, so the
build is deterministic and green on nettle 4.0; gnutls TLS is unaffected.
The real fix is a nettle-4.0 port of src/crypto/nettle in neatvnc upstream;
this only keeps the recipe building meanwhile.

Assisted-by: Claude:claude-opus-4-8
Signed-off-by: Johannes Schneider <johannes.schneider@leica-geosystems.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-27 13:07:02 -07:00
Leon Anavi 8b3b622c15 hunspell: Upgrade 1.7.5 -> 1.7.6
Upgrade to release 1.7.6:

- add, add_with_flags, add_with_affix and remove apply the
  dictionary's ICONV rules to the word, as spell does, so a
  caller that converted the word itself must stop doing so
- A personal dictionary exclusion such as *afterwards also
  rejects the word when the dictionary has it only as an affixed
  form
- stem and analyze give st: stem fields again with
  COMPLEXPREFIXES
- analyze lists every analysis of a compound word, where a
  rejected split of the word could hide the splits after it
- The text and XML parsers check the character after a character
  entity such as &agrave;
- The interactive mode shows the first digit of a two digit
  suggestion number
- The -a pipe interface checks a line of any length in one piece
- The hunspell tool takes -- as the end of the options, the -u2
  sed script escapes the word and the suggestion, and a zipped
  ODF file whose name starts with - can be checked
- The hunspell tool no longer searches the OpenOffice.org 2.x and
  3 folders or LibreOffice's user wordbook folder for
  dictionaries, and searches /Library/Spelling and
  ~/Library/Spelling only on macOS
- On Windows, search the share\hunspell, share\myspell and
  share\myspell\dicts folders of the installation that holds
  hunspell.exe
- New configure option --disable-tools to build and install only
  the library
- A static-only build records that in the installed hunvisapi.h,
  so its users need not define HUNSPELL_STATIC
- Install the Hungarian hunspell.5 in hu/man5
- Use Mozilla's own FileMgr and csutil code in MOZILLA_CLIENT
  builds
- A CMake build of the library, as an alternative to configure
- New configure option --enable-werror, off by default
- Man page: the fallback dictionary is en_US, the SYNOPSIS lists
  -u, -U, -u2, -u3, -P and --trace, and -a reads a file with the
  pipe protocol too
- Build fixes: MinGW, the BSDs, macOS, makealias without gawk or
  GNU sed, readline and curses detection, and the release tarball
  ships the CMake files and all the test data
- oss-fuzz and Coverity fixes and hardening

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-27 13:07:02 -07:00
Leon Anavi d93879e317 zlog: Upgrade 1.2.19 -> 1.2.20
Upgrade to release 1.2.20:

- Added zlog_fsync(), to flush the logs to disk on demand.
- Added zlog_is_init(), so a library can tell whether the program
  around it has already set zlog up.
- Added zlog_category_has_rules(), so a caller can tell a
  category the configuration covers from one it has never heard of.
- Added zlog_fini_try(), which gives up instead of waiting for
  the configuration lock. zlog_fini() from a signal handler that
  interrupted a thread inside zlog waits forever.
- A rotating rule keeps its file open between messages: two
  syscalls a line instead of four, and about 1.8x faster.
- An oversized message is formatted once instead of twice:
  "%.200m" of a 4MB message is about twice as fast, for identical
  output.
- A message longer than buffer max is truncated instead of being
  dropped.
- Every %E(NAME) in a format or a file path is replaced, not just
  the first one. Two of them used to fail zlog_init().
- The rotate lock file falls back to /tmp/zlog.lock when the
  configuration file is not writable, instead of failing every
  rotation silently. It is created 0644 rather than 0777, and a
  symbolic link in its place is refused.
- The pthread return values in the writer thread are checked in
  release builds too, not only where asserts are compiled in.
- hzlog prints the buffer length in front of the dump.
- Include guards no longer use identifiers reserved to the
  implementation; the public one is ZLOG_ZLOG_H.
- __DATE__ and __TIME__ are gone, so the build is reproducible.
- Fixed the install and test targets in the top level Makefile.
- zlog.spec is gone: CPack generates its own, and the
  distributions that package zlog use their own.
- Dead code removed from conf.c, level_list.c and thread.c, and
  the debug messages removed from CMakeLists.txt.
- The release procedure is written down in doc/developer.md and
  no longer names a version, the rotate lock file section of the
  users guide says what the code does, and CLAUDE.md is corrected
  and translated to English.
- Typos fixed throughout the tree.
- Tests added for zlog_init(NULL), the rotation lock file, buffer
  max truncation, %E() replacement, and the return values
  test_press_write2 used to ignore

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-27 13:07:02 -07:00
Khem Raj bfca43aee5 python3-grpcio-tools: Use python_setuptools_build_meta
pyproject.toml specifies setuptools.build_meta as the build backend, so
inherit python_setuptools_build_meta instead of setuptools3. Fixes:

QA Issue: inherits setuptools3 but has pyproject.toml specifying backend
setuptools.build_meta, use the correct class [pep517-backend]

pyproject-build checks the build requirements, so add the wheel and
Cython build dependencies and relax the strict Cython==3.1.1 pin, as
python3-grpcio already does. The C++ sources are pre-generated, so
Cython is not actually run.

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-27 13:07:02 -07:00
Leon Anavi 298e364a9e weechat: Upgrade 4.10.0 -> 4.10.1
Upgrade to release 4.10.1:

Bugfixes:

- irc: fix memory leak in SASL authentication with mechanism
  "ecdsa-nist256p-challenge"
- irc: reject an empty SASL challenge received with mechanism
  "ecdsa-nist256p-challenge"

Security:

- relay: limit size of data queued for sending to a client to
  prevent memory exhaustion
- relay: reject fragmented, compressed or oversized websocket
  control frames received from a client
- relay: limit size of partial message received from a client to
  prevent memory exhaustion
- script: reject script names containing path separators in the
  scripts repository file to prevent writing files outside the
  scripts directory
- xfer: fix comparison of status in search of transfers, preventing
  a remote peer from starting a file transfer that was not accepted
  by the user
- xfer: limit size of partial message received in DCC chat to
  prevent memory exhaustion
- xfer: remove path from filename received in DCC file transfer to
  prevent writing the file outside the download directory

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-27 13:07:02 -07:00
Leon Anavi 737b3fae98 uftp: Upgrade 5.0.3 -> 5.0.4
Upgrade to release 5.0.4:

- Fixed crash with large jumbo block sizes with encryption enabled
- Fixed NAK counting when checking for excess NAKs
- Fixed invalid read of server -a option
- Fixed fragmentation for block sizes close to 1500 and 9000 byte
  MTUs
- Removed unnecessary PROXY_KEY messages during unencrypted
  sessions
- Disabled deprecation warnings for OpenSSL
- Cache name lookups for incoming packets to decrease load
- Minor fixes for Apple builds
- Fixed Windows header file inclusions

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-27 13:07:02 -07:00
Leon Anavi e064c55a87 nbdkit: Upgrade 1.48.0 -> 1.49.4
Upgrade to release 1.49.4:

- vddk: Deprecate this plugin
- server/public.c: Try harder to make a timestamp

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-27 13:07:01 -07:00
Leon Anavi 227ba70cc8 nanomsg: Upgrade 1.2.5 -> 1.3.0
Upgrade to release 1.3.0:

- ipc: Add unix:// scheme, including on Windows, and winpipe:// on
  Windows

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-27 13:07:01 -07:00
Leon Anavi ea41ecafa5 libmaxminddb: Upgrade 1.13.3 -> 1.14.1
Upgrade to release 1.14.1:

- Fixed a -Wsign-compare warning in MMDB_open() that broke builds
  with -Werror on platforms where ssize_t is 32 bits, such as i686.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-27 13:07:01 -07:00
Leon Anavi 52fe68ce15 libdaq: Upgrade 3.0.27 -> 3.0.28
Upgrade to release 3.0.28:

- api: add DIOCTL_GET_DAQ_COUNTERS_SUMMARY for generic DAQ counter
  export
- api: QinQ outer vlan tag addition
- build: add fourth digit to daq version field
- daq: add drop_reason_str to DAQ_FlowStats_t

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-27 13:07:01 -07:00