Commit Graph

37499 Commits

Author SHA1 Message Date
Wang Mingyu 12eaeb566b gnome-text-editor: upgrade 48.3 -> 49.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-22 22:01:04 -08:00
Wang Mingyu 4c95273fd5 geos: upgrade 3.13.1 -> 3.14.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-22 22:01:04 -08:00
Wang Mingyu 838d7e506f folks: upgrade 0.15.9 -> 0.15.12
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-22 22:01:04 -08:00
Wang Mingyu 3140029280 evince: upgrade 48.0 -> 48.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-22 22:01:04 -08:00
Wang Mingyu 11838942fd dnsmasq: upgrade 2.91 -> 2.92
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-22 22:01:04 -08:00
Wang Mingyu d913f625cc ctags: upgrade 6.2.20260111.0 -> 6.2.20260118.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-22 22:01:03 -08:00
Wang Mingyu f2c2e4d50c catch2: upgrade 3.8.1 -> 3.12.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-22 22:01:03 -08:00
Wang Mingyu 0eea1151a2 weechat: upgrade 4.6.0 -> 4.8.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-22 22:01:03 -08:00
Wang Mingyu 65eab60c93 wavpack: upgrade 5.8.1 -> 5.9.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-22 22:01:03 -08:00
Wang Mingyu 06028612e9 rdfind: upgrade 1.6.0 -> 1.7.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-22 22:01:03 -08:00
Wang Mingyu 68a249df75 python3-xmlschema: upgrade 4.3.0 -> 4.3.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-22 22:01:03 -08:00
Wang Mingyu e288070514 python3-types-psutil: upgrade 7.2.1.20251231 -> 7.2.1.20260116
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-22 22:01:02 -08:00
Wang Mingyu fa3ce8c42a python3-starlette: upgrade 0.51.0 -> 0.52.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-22 22:01:02 -08:00
Wang Mingyu f84f881351 python3-soupsieve: upgrade 2.8.1 -> 2.8.2
License-Update: Copyright year updted to 2026.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-22 22:01:02 -08:00
Wang Mingyu b9bd8426db python3-regex: upgrade 2025.11.3 -> 2026.1.15
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-22 22:01:02 -08:00
Wang Mingyu 65c850da4f python3-pymisp: upgrade 2.5.17 -> 2.5.32
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-22 22:01:02 -08:00
Wang Mingyu 0ee36e8e5a python3-py7zr: upgrade 1.1.0 -> 1.1.2
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-22 22:01:02 -08:00
Wang Mingyu a462432b6a python3-protobuf: upgrade 6.33.2 -> 6.33.4
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-22 22:01:01 -08:00
Wang Mingyu 2a8b4c695e python3-moteus: upgrade 0.3.97 -> 0.3.98
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-22 22:01:01 -08:00
Wang Mingyu da80db34b6 python3-identify: upgrade 2.6.15 -> 2.6.16
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-22 22:01:01 -08:00
Wang Mingyu 2746a0ad19 python3-httplib2: upgrade 0.31.0 -> 0.31.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-22 22:01:01 -08:00
Wang Mingyu 70b10d77bb python3-alembic: upgrade 1.18.0 -> 1.18.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-22 22:01:01 -08:00
Wang Mingyu 2d21040385 pure-ftpd: upgrade 1.0.52 -> 1.0.53
License-Update: Copyright year updated to 2026.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-22 22:01:01 -08:00
Wang Mingyu 4e8339716a plocate: upgrade 1.1.23 -> 1.1.24
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-22 22:01:00 -08:00
Wang Mingyu b26eda545e msgraph: upgrade 0.3.3 -> 0.3.4
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-22 22:01:00 -08:00
Wang Mingyu e6cb0aa585 babl: upgrade 0.1.118 -> 0.1.120
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-21 15:31:08 -08:00
Leon Anavi 7476295bea python3-wsproto: Upgrade 1.2.0 -> 1.3.2
Upgrade to release 1.3.2:

- Fix type hints to allow BytesMessage to accept bytes again, as
  well as bytearray.

Release 1.3.1:

- Add additional license identifier to pyproject.toml.
- Use Python 3.13 to build the docs to match ReadTheDocs build
  environment.

Release 1.3.0:

- Require h11>=0.16 dependency.
- Fix "Upgrade" header value to match RFC.
- Add reason "Switching Protocols" to handshake response.
- Add docs for wsproto.Connection
- Add support for Python 3.12, 3.13, and 3.14.
- Drop support for Python 3.7, 3.8, and 3.9.
- Improve Python typing, specifically bytes vs. bytearray.
- Various linting, styling, and packaging improvements.

Fixes:

WARNING: python3-wsproto-1.3.2-r0 do_check_backend: QA Issue:
inherits setuptools3 but has pyproject.toml with
setuptools.build_meta, use the correct class [pep517-backend]

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-21 15:31:08 -08:00
Leon Anavi a25b352d19 python3-pyperclip: Upgrade 1.9.0 -> 1.11.0
Upgrade to release 1.11.0:

- Mention Wayland in error message
- Update __init__.py

License-Update: Use LICENSE.txt

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-21 15:31:07 -08:00
Leon Anavi 61f918dbbf python3-bumble: Upgrade 0.0.221 -> 0.0.223
Upgrade to release 0.0.223:

- Add annotation for Heart Rate and Battery Service
- Add test for Heart Rate and Battery Service
- Add support for RTL8761CU
- feat: Add filtering options for usb probe
- Fix GATT TemplateSerivce annotations
- Improve Address type annotations
- Replace send_pdu() with write()
- GATT: Support Multiple Requests
- Correct ATT_MTU in enhanced bearers
- Add HCI Packets annotations and send_sco_sdu
- Return 'invalid handle' for malformed read by type request

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-21 15:31:07 -08:00
Kai Kang 96a6c18a8c gtkmm3/gtkmm4: not set BPN
Set BPN in gtkmm3 and gtkmm4 recipes is to inherit gnomebase.bbclass
properly. But it uses variable GNOMEBN rather than BPN for SRC_URI and
S in gnomebase.bbclass now, update in the recipes accordingly.

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-21 15:29:20 -08:00
Liwei Song 461e5620bc tmon: add a new recipe to generate tmon
tmon is a monitoring and testing tool for Linux kernel thermal
subsystem, it help visualize, tune, and test this complex system.

Signed-off-by: Liwei Song <liwei.song@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-21 15:29:20 -08:00
Pratyush Meduri def8784b1d tinycompress: install compress_ops.h as public header
Add a patch to install compress_ops.h as a public header for
tinycompress, and update the recipe to apply it.

This is required for users that need access to compress_ops from
external components.

Upstream-Status: submitted

Signed-off-by: Pratyush Meduri <mpratyus@qti.qualcomm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-21 15:29:20 -08:00
Jason Schonberg 7bbe4a4e20 php: upgrade 8.5.1 -> 8.5.2
This is a bugfix release.  Integer underflows, memory leaks, null pointer
dereferences and more.

Changelog: https://www.php.net/ChangeLog-8.php#8.5.2

Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-20 14:35:59 -08:00
Khem Raj d2539548d0 python3-backports-zstd: Delete
It conflicts with standard library with python 3.14+

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-20 08:44:21 -08:00
Schulz, Andreas - Enabler & Imaging Software 5731669e86 tumbler: Split plugins into own packages
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-20 08:27:14 -08:00
Leon Anavi 36d480b9e1 python3-icecream: Upgrade 2.1.8 -> 2.1.9
Upgrade to release 2.1.9:

- Removed support for Python 3.8.
- Fixed issues to improve lists output.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-20 08:27:14 -08:00
Leon Anavi 6c439b75a9 python3-tomlkit: Upgrade 0.13.3 -> 0.14.0
Upgrade to release 0.14.0:

- fix: Add DottedKey to a super table gives wrong output
- feat: enhance custom encoders to accept _parent and _sort_keys
  parameters

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-20 08:27:14 -08:00
Leon Anavi e102cccecf python3-pynacl: Upgrade 1.5.0 -> 1.6.2
Upgrade to release 1.6.2:

- Updated libsodium to 1.0.20-stable (2025-12-31 build) to resolve
  CVE-2025-69277.

From 1.6.1:

- The MAKE environment variable can now be used to specify the make
  binary that should be used in the build process.

From 1.6.0:

- BACKWARDS INCOMPATIBLE: Removed support for Python 3.6 and 3.7.
- Added support for the low level AEAD AES bindings.
- Added support for crypto_core_ed25519_from_uniform.
- Update libsodium to 1.0.20-stable (2025-08-27 build).
- Added support for free-threaded Python 3.14.
- Added support for Windows on ARM wheels.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-20 08:27:14 -08:00
Adam Duskett df2ac27812 kmscon: Add recipe
Provide sane defaults that do not have dependencies, such as
a dummy and terminal session support and basic fbdev support.

kmsconvt@.service must be added separatly or else
do_rootfs fails with the following error:

```
do_rootfs: Postinstall scriptlets of ['kmscon'] have failed. If the intention
is to defer them to first boot, then please place them into
pkg_postinst_ontarget:${PN} (). Deferring to first boot via 'exit 1' is no
longer supported.
```

Add a small patch to fix a compiling error when using LLVM as the
preferred toolchain.

Signed-off-by: Adam Duskett <adam.duskett@amarulasolutions.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-20 08:27:13 -08:00
Adam Duskett 200f48d774 libtsm: add recipe for kmscon dependency
Signed-off-by: Adam Duskett <adam.duskett@amarulasolutions.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-20 08:27:13 -08:00
Khem Raj 4350c04949 python3-html5lib: Fix build with python 3.14
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-20 08:27:13 -08:00
Gyorgy Sarvari 498b49d2a4 python3-lief: mark CVE-2025-15504 patched
Details: https://nvd.nist.gov/vuln/detail/CVE-2025-15504

The vulnerability is patched in v0.17.2, however NVD is currently tracking
the CVE without any version info (or more like with out any CPE info)

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-20 08:27:13 -08:00
Gyorgy Sarvari cc4aa9b9d0 python3-lief: upgrade 0.17.1 -> 0.17.2
Contains fix for CVE-2025-15504

Changelog:
- Differentiate Mach-O FAT magic bytes and Java class
- Fix MinGW compilation for some configuration
- Fix alignment issue when rebuilding PE relocations
- Fix infinite loop when processing v2 dynamic relocation
- Ensure that added DYN ELF sections are properly aligned
- Fix GnuHash null dereference
- Fix strong performance issue when parsing certain Mach-O

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-20 08:27:13 -08:00
Gyorgy Sarvari 91f6b85b36 python3-py: ignore CVE-2022-42969
Details: https://nvd.nist.gov/vuln/detail/CVE-2022-42969

Upstream could not reproduce the issue.
The vulnerability has currently the "disputed" flag in the NVD database,
and Github has revoked their related advisory[1].

Ignore this CVE due to this.

[1]: https://github.com/advisories/GHSA-w596-4wvx-j9j6

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-20 08:27:13 -08:00
Gyorgy Sarvari ecf359d256 python3-werkzeug: upgrade 3.1.4 -> 3.1.5
Contains fix for CVE-2026-21860

Changelog:
- safe_join on Windows does not allow more special device names,
  regardless of extension or surrounding spaces.
- The multipart form parser handles a \r\n sequence at a chunk boundary.
  This fixes the previous attempt, which caused incorrect content lengths.
- Fix AttributeError when initializing DebuggedApplication with pin_security=False.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-20 08:27:12 -08:00
Gyorgy Sarvari 3cd47f72ad frr: patch CVE-2025-61099..61107
Details:
https://nvd.nist.gov/vuln/detail/CVE-2025-61099
https://nvd.nist.gov/vuln/detail/CVE-2025-61100
https://nvd.nist.gov/vuln/detail/CVE-2025-61101
https://nvd.nist.gov/vuln/detail/CVE-2025-61102
https://nvd.nist.gov/vuln/detail/CVE-2025-61103
https://nvd.nist.gov/vuln/detail/CVE-2025-61104
https://nvd.nist.gov/vuln/detail/CVE-2025-61105
https://nvd.nist.gov/vuln/detail/CVE-2025-61106
https://nvd.nist.gov/vuln/detail/CVE-2025-61107

The NVD advisory refernces a PR[1] that contains only an unfinished, and
ultimately unmerged attempt at the fixes. The actual solution comes from
a different PR[2]. These patches are 3 commits from that PR. The last
commit wasn't backported, because it is just code formatting.

[1]: https://github.com/FRRouting/frr/pull/19480
[2]: https://github.com/FRRouting/frr/pull/19983

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-20 08:27:12 -08:00
Gyorgy Sarvari b8b3ab6048 freerdp3: upgrade 3.20.0 -> 3.20.2
Contains fixes for the following vulnerabilities:
CVE-2026-22851, CVE-2026-22852, CVE-2026-22853, CVE-2026-22854,
CVE-2026-22855, CVE-2026-22856, CVE-2026-22857, CVE-2026-22858,
CVE-2026-22859

Changelogs:
https://www.freerdp.com/2026/01/14/3_20_1-release
https://www.freerdp.com/2026/01/14/3_20_2-release

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-20 08:27:12 -08:00
Gyorgy Sarvari dc2c6a514e raptor2: patch CVE-2024-57822 and CVE-2024-57823
Details: https://nvd.nist.gov/vuln/detail/CVE-2024-57822
https://nvd.nist.gov/vuln/detail/CVE-2024-57823

Pick the patches mentioned in the github issue[1] mentioned
in the NVD advisories (both of them are covered by the same issue)

[1]: https://github.com/dajobe/raptor/issues/70

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-20 08:27:12 -08:00
Tero Kinnunen 43dbdb9c57 python3-watchdog: Remove obsolete dependencies
Python watchdog has removed all dependencies except optional `pyyaml`
dependency for `watchmedo` utility, like follows [1]:

* pathtools dependency was removed in 1.0.0
* python-argh dependency removed in 2.1.6
* requests was never a dependency
* pyyaml only needed for extras (`watchmedo`) and may not be strictly necessary

[1] https://github.com/gorakhargosh/watchdog/blob/master/changelog.rst

Signed-off-by: Tero Kinnunen <tero.kinnunen@vaisala.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-20 08:27:12 -08:00
Leon Anavi cc0c4a6e34 python3-black: Upgrade 25.12.0 -> 26.1.0
Upgrade to release 26.1.0:

Introduces the 2026 stable style, stabilizing the following changes:

- always_one_newline_after_import: Always force one blank line after
  import statements, except when the line after the import is a
  comment or an import statement
- fix_fmt_skip_in_one_liners: Fix # fmt: skip behavior on one-liner
  declarations, such as def foo(): return "mock" # fmt: skip, where
  previously the declaration would have been incorrectly collapsed
- fix_module_docstring_detection: Fix module docstrings being
  treated as normal strings if preceded by comments
- fix_type_expansion_split: Fix type expansions split in generic
  functions
- multiline_string_handling: Make expressions involving multiline
  strings more compact
- normalize_cr_newlines: Add \r style newlines to the potential
  newlines to normalize file newlines both from and to
- remove_parens_around_except_types: Remove parentheses around
  multiple exception types in except and except* without as
- remove_parens_from_assignment_lhs: Remove unnecessary parentheses
  from the left-hand side of assignments while preserving magic
  trailing commas and intentional multiline formatting
- standardize_type_comments: Format type comments which have zero
  or more spaces between # and type: or between type: and value to
  # type: (value)

The following change was not in any previous stable release:

- Regenerated the _width_table.py and added tests for the Khmer
  language

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-20 08:27:12 -08:00