Commit Graph
40754 Commits
Author SHA1 Message Date
Ankur Tyagi ad9e7732e6 pjproject: patch CVE-2026-57164
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-57164

(cherry picked from commit 274e935099c034192a6815a660b6e8ce0ea9ab92)

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-19 15:08:25 -07:00
Ankur Tyagi 79c6fa05ca pjproject: patch CVE-2026-57163
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-57163

(cherry picked from commit 3cc8b60359265c8c6a34242f6c9eb8c3b3c50108)

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-19 15:08:24 -07:00
Ankur Tyagi 8d3536131c pjproject: patch CVE-2026-57162
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-57162

(cherry picked from commit f7758a033eec4754fdb957a0fb2c6d2d5cb31ea6)

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-19 15:08:24 -07:00
Ankur Tyagi 8e1643c4b6 pjproject: patch CVE-2026-57161
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-57161

(cherry picked from commit 371f20419d88f75dd45508451ec014d1a0c94b70)

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-19 15:08:24 -07:00
Ankur Tyagi d54112ed60 pjproject: patch CVE-2026-57160
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-57160

(cherry picked from commit 78f0ee20ccfb85b9cc8477e19bb143110d975962)

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-19 15:08:24 -07:00
Ankur Tyagi 9e5ab43682 pjproject: mark CVE-2026-26967 fixed
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-26967

(cherry picked from commit bb27c215be50ff54ac07f976337432f8773baddc)

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-19 15:08:24 -07:00
Ankur Tyagi 969fb920b4 netdata: mark CVE-2026-83602 fixed
Fix identified by NVD is included in the patch release[1] v2.10.4

Details:
https://nvd.nist.gov/vuln/detail/cve-2026-83602

[1]https://github.com/netdata/netdata/pull/22825

(cherry picked from commit 4d88db205cd6981f7e1388fdcc17b451f9f8fecd)

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-19 15:08:24 -07:00
Leon Anavi 151584c71c python3-breathe: Upgrade 4.36.0 -> 5.1.0
Upgrade to release 5.1.0:

- Dropped support for Sphinx 6.2, 7.0 & 7.1 and added python 3.14
- Strip leading spaces when making initializer
- Fix duplicate constexpr qualifiers on constructors
- Handle C++11 extended friend declarations
- Keep template arguments in class template specialization names

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-19 15:08:24 -07:00
Leon Anavi a533c9b84c python3-cytoolz: Upgrade 1.1.0 -> 1.2.0
Upgrade to release 1.2.0:

- Match toolz 1.2.0
- Support Python 3.15
- Build Android wheels, upload Pyodide wheels, and test iOS wheels

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-19 15:08:23 -07:00
Leon Anavi 40968651d3 python3-cmd2: Upgrade 4.2.4 -> 4.3.0
Upgrade to release 4.3.0:

Overview:

This release primarily fixes a number of subtle bugs related to piping
cmd2 command output to shell commands. It also removes the experimental
tag from the @with_annotated decorator feature.

Details:

- Stabilized features
    - @with_annotated is no longer experimental. It was introduced
      as an experimental feature in 4.0.0 and is now a fully
      supported way to define a command's arguments, alongside
      @with_argparser. This covers the decorator and its supporting
      API in cmd2.annotated, including Argument, Option, Group, and
      ArgumentBlock. Annotated Argument Processing.
- Bug Fixes
    - On POSIX, piping a command's output to an interactive program
      such as less (help -v | less) now runs that program as the
      terminal's foreground job, as a shell pipeline does. It had
      run in a separate session that never received the terminal,
      so Ctrl-Z and fg did not suspend and resume it together with
      cmd2. The program now owns the terminal as it starts, so a
      pager can set its terminal modes, and Ctrl-C and Ctrl-Z reach
      the whole pipeline. Pipes started from a worker thread, or
      whose output does not go to the terminal, such as one nested
      in a command whose own output is piped, still run in their
      own session
    - A shell command piped to an interactive program, such as
      shell git log | less, now joins the pipeline's job, so both
      processes receive Ctrl-C and Ctrl-Z
    - On Windows, fixed piped output appearing garbled in console
      programs such as more (help -v | more), a regression in
      4.2.4. Pipes are written as UTF-8, but console programs
      decode their input with the console's code page. While a pipe
      or the pager runs, cmd2 now sets the console to UTF-8 (code
      page 65001, as chcp 65001 does) and restores its code pages
      afterward, so console programs and UTF-8 tools such as rg
      both read the output correctly
    - When copying a command's output to the clipboard (help >)
      fails, later commands' output is no longer written to the
      temporary file that held it
    - When a pipe's process cannot be started, for instance because
      no more processes can be created or $SHELL names a program
      that cannot run, both ends of the pipe are now closed rather
      than left open
    - When a pipe's process exits before the command runs, what it
      wrote, such as the shell's "command not found", is no longer
      lost when cmd2 captures the output, as in a pyscript

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-19 15:08:23 -07:00
Leon Anavi 3d58d42f26 python3-cchardet: Upgrade 2.1.7 -> 2.4.0
Upgrade to release 2.4.0:

- Supports Python 3.15, including the free-threaded CPython 3.15
  build, with tests and wheels for Linux, macOS, and Windows.
- Publishes Windows ARM64 wheels, and builds Linux aarch64 wheels
  on native arm64 runners instead of under QEMU emulation.
- Tests every supported Python version on arm64 Linux and Windows
  in addition to x86-64.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-19 15:08:23 -07:00
Leon Anavi 975ddf4003 python3-cantools: Upgrade 41.0.2 -> 45.0.0
Upgrade to release 45.0.0:

- deprecate the diagnostic functionality
- lint: keep the linter green with ruff 0.17
- plot: read the candump lines that logreader reads
- kcd: declare senders and receivers that are not in the node list
- sym: write line breaks in comments as spaces

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-19 15:08:23 -07:00
Leon Anavi 3a8e916721 python3-cachetools: Upgrade 7.1.7 -> 7.2.3
Upgrade to release 7.2.3:

- Fix @cached decorator stacking behavior.
- Minor type stub improvements.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-19 15:08:23 -07:00
Leon Anavi 5a9e2afb80 python3-bumble: Upgrade 0.0.235 -> 0.0.236
Upgrade to release 0.0.236:

- Use signed values for the AICS gain setting fields
- Fix record offsets when parsing a list of PAC records
- serial: add an option to resynchronize with the controller on open
- Reject public keys that are not on the curve in the builtin ECDH
- gatt: enforce value size and queue limits on server long writes
- usb: support Bluetooth controllers that are not interface 0 of a
  composite device
- Disconnect LE credit-based channels on invalid SDU lengths
- smp: save pairing keys to keystore before draining connection
- Stop calling the deprecated Host.send_command_sync()
- Fix - remove BIG Sync handles on BigSync.terminate to prevent
  resync failures
- ci: pin GitHub Actions to commit SHAs to resolve zizmor issues
- remove support for python 3.10 and add 3.15

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-19 15:08:23 -07:00
Leon Anavi 7f82207f63 python3-blivet: Upgrade 3.13.2 -> 3.14.2
Upgrade to release 3.14.2:

- fs: Fix filesystem type for temporary mounts
- misc: Fix condition for installing pocketlint on Debian/Ubuntu
- misc: Use ansible_facts instead of deprecated top-level fact variables
- Update properties for started stratis pools during populate
- Fix extra mount options for Stratis filesystems in fstab
- Directly access _type/_name in _to_string to avoid subclass property
  lock
- Fix deadlock between blivet_lock and logging lock

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-19 15:08:22 -07:00
Leon Anavi 81fe5fa82c python3-black: Upgrade 26.5.1 -> 26.10.1
Upgrade to release 26.10.1:

Highlights:

This release fixes a security issue in Black's bundled GitHub
Action. Repositories that use the action are encouraged to update
to the latest version of Black immediately. This update is received
automatically when using psf/black@stable, and is independent of
the version of Black installed by the action.

When the GitHub Action reads version specifiers from
tool.black.required-version, it now only accepts released versions
of Black, as it already did for black requirements in dependency
lists. Other values, such as URL references, are now rejected. This
issue has been registered as GHSA-cg8m-r9f2-5wm2; a CVE identifier
is pending.

Stable style:

- Fix a long Jupyter notebook assignment magic (for example x = !ls
  -la) being wrapped in parentheses, which IPython can no longer
  run; such cells are now left unchanged
- Keep repeated lines outside the selected --line-ranges unchanged
- Fix --line-ranges formatting lines that follow a statement when
  formatting joins or re-indents that statement
- Fix --line-ranges crashing with an internal error when an
  unselected statement has a # fmt: skip comment on the last line
  before a closing bracket
- Prevent moving an encoding declaration (for example # -*- coding:
  latin-1 -*-) onto the first two lines of a file
- Fix adding an extra trailing blank line inside a multi-line
  module docstring when its last line is near the line length limit

Preview style:

- Do not split short expressions on delimiters (such as binary
  operators, comparisons, or comprehensions) inside brackets when
  preceded by a standalone comment
- Fix the unstable string_processing feature removing
  backslash-newline sequences from raw strings, which changed their
  value
- Avoid adding unnecessary parentheses around unbreakable
  right-hand side expressions in assignments (such as annotated
  assignments or subscript targets)
- Parenthesize expressions with parameter comments when they exceed
  the line length under --preview
- Fix wrap_long_dict_values_in_parens dropping the parentheses
  around a right-hand side that contains a dictionary, leaving a
  line over the length limit
- Fix the unstable string_processing feature adding a space after *
  or in a PEP 695 type parameter (* Ts = ...) when it splits a
  string in the parameter's default
- Avoid unnecessary line splits of trailers (such as
  indexing/subscripts) when an earlier bracket split exceeds the
  line length only due to a trailing comment

Configuration:

- Add --cache-dir to configure the cache directory from the command
  line
- Don't cache a file as formatted after formatting or checking it
  with --line-ranges, which made a later full black --check pass
  and black skip the unformatted lines
- Respect a .gitignore that starts with a UTF-8 byte order mark.
  The mark became part of the first pattern, so that pattern never
  matched and Black formatted files that git ignores

Performance:

- Avoid quadratic runtime when splitting very long lines with many
  trailing bracket pairs (such as consecutive subscripts)

Integrations:

- Fix the GitHub Action crashing on dependency-group includes when
  use_pyproject is enabled
- When the GitHub Action reads version specifiers from
  tool.black.required-version, it now only accepts released
  versions of Black, as it already did for black requirements in
  dependency lists. Other values, such as URL references, are now
  rejected.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-19 15:08:22 -07:00
Leon Anavi c7c5a067e3 python3-autobahn: Upgrade 26.7.1 -> 26.10.1
Upgrade to release 26.10.1:

General

- Load the vendored FlatBuffers runtime only when a FlatBuffers
  message is first built or parsed, instead of on every import
  autobahn. The runtime imports numpy whenever numpy is installed,
  so up to 26.7.1 every process importing autobahn also loaded numpy,
  including WebSocket-only users such as Django Channels applications
  served by Daphne. Every autobahn import now needs about 13-17 MB
  less memory on CPython and 18-24 MB less on PyPy, and none loads
  numpy. A new documentation page (docs/memory-footprint.rst, just
  memory-footprint) shows the import memory footprint per release on
  CPython and PyPy.

Wheels

- Publish native Windows ARM64 (win_arm64) wheels with NVX for
  CPython 3.11-3.14, built on GitHub’s windows-11-arm runners (PyPy
  publishes no Windows ARM64 interpreter); thanks to @ndabas.
  cryptography currently publishes no win_arm64 wheel, so the build
  compiles it against an OpenSSL from vcpkg.

- Build cryptography against an OpenSSL from vcpkg on Windows x86_64
  too: cryptography 50.0.2 publishes its Windows PyPy wheels for PyPy
  8 (pp80) only, and the pypy311 wheel build uses PyPy 7.3 (pp73), so
  pip builds it from source there.

WebSocket

- Make all four per-message compression extensions
  (permessage-deflate, -bzip2, -brotli, -snappy) enforce the
  decompression budget the same way: decompression stops near the
  remaining maxMessagePayloadSize budget instead of decompressing a
  whole frame first, and “over budget” as well as “budget already
  used up” raise PayloadExceededError. brotli now bounds its output
  with Decompressor.process(output_buffer_limit=...), snappy is
  decompressed one framing chunk at a time, and deflate no longer
  lets one octet through once the budget is used up.

- Add autobahn.exception.PayloadCorruptError: every compression
  extension now raises it for input it cannot decompress (corrupt,
  truncated, or not the extension’s format), instead of the library’s
  own exception (zlib.error, OSError, brotli.error, …), and snappy no
  longer accepts such input silently. The protocol fails the
  connection with close code 1007 (invalid frame payload data), the
  same for every extension and on both Twisted and asyncio.

- Fix permessage-brotli failing on the second message of a connection
  when context takeover was negotiated (the default): the compressor
  and decompressor were reused after their brotli stream had
  finished. Each message is now a new brotli stream, which is the
  wire format brotli used for the first message already, and for no
  context takeover.

- Fix an asyncio WebSocket connection being left open, but no longer
  serviced, when an exception escaped the processing of received
  data: the connection is now dropped, as on Twisted.

- Add a documentation page on WebSocket compression
  (docs/websocket/compression.rst): for each of the four extensions,
  which Python package and which compression library (and bundled
  version) it uses on CPython and on PyPy, plus context takeover,
  decompression limits and the handling of invalid data. The old,
  unpublished page under docs/work/ did not cover permessage-brotli

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-19 15:08:22 -07:00
Khem Raj 6fab30c550 ptyxis: Fix build with musl
W_EXITCODE() is a glibc extension that musl does not provide, so clang
fails with -Wimplicit-function-declaration. Define it when missing,
using the glibc definition.

AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-18 17:38:49 -07:00
Khem Raj 397560f807 zbar: Fix test build with musl
test/meson.build assumed libc provides argp whenever argp.h exists, but
on musl the header comes from argp-standalone, pulled into the sysroot
via v4l-utils, and test_decode/test_video failed to link argp_parse.
Backport the upstream fix that also checks for argp_parse and falls
back to the bundled non_argp.c.

AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-18 17:38:48 -07:00
Khem Raj bcf3420637 sockperf: Add RISC-V support
configure rejected riscv hosts as not ported, and the TSC read fell back
to x86 rdtsc. Patch both, reading the time CSR with rdtime.

Tested by building for qemuriscv64 (musl, clang) and running a loopback
ping-pong under qemu-riscv64.

AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-18 17:38:48 -07:00
Khem Raj c794b5fe79 clight: Fix build with musl
log.c uses open() and O_* flags without including <fcntl.h>, which
glibc pulls in indirectly but musl does not, so clang fails with
-Wimplicit-function-declaration.

AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-18 17:38:48 -07:00
Khem Raj b990e52583 bpftool: Set ARCH for the kernel tools build
kernel-arch.bbclass no longer sets ARCH (oe-core 635f85b7b8), so
ARCH=${ARCH} expanded to an empty value and tools/scripts/Makefile.arch
fell back to the build host's uname -m. libbpf was then built with
tools/arch/x86/include, breaking cross builds, e.g. on riscv64:

  tools/arch/riscv/include/asm/barrier.h:13:10: fatal error: asm/fence.h: No such file or directory

Set ARCH from map_kernel_arch() as perf.bb does.

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-18 16:57:55 -07:00
Khem Raj e4d5a8c1ab x265: Apply the patches with right patch level.
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-18 12:53:54 -07:00
Khem Raj be45423321 luajit: Enable riscv64 using the plctlab LuaJIT fork
Upstream LuaJIT v2.1 has no riscv64 backend, so fetch the plctlab
v2.1-riscv64 branch on riscv64, with the recipe's patches rebased onto
it, and drop the riscv64 COMPATIBLE_HOST restriction.

Tested by building for qemuriscv64 (musl, clang) and running a JIT-ed
loop under qemu-riscv64 (jit.status() is true).

AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-18 12:39:55 -07:00
Khem Raj af818ff249 luajit: Set TARGET_SYS to Linux for musl targets
TARGET_OS is linux-musl on musl, which matched none of the
LUA_TARGET_OS overrides, so TARGET_SYS was Unknown and LuaJIT was built
for LUAJIT_OS_OTHER, losing Linux-specific features such as the
profiler (LJ_HASPROFILE).

AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-18 12:39:55 -07:00
Khem Raj 7382e41ed6 AGENTS.md: Add contribution guidance for AI agents
Document the mailing list workflow and the conventions agents get wrong
most often: recipe-only commit summaries with the sub-layer tag carried in
the email subject as [meta-oe][PATCH x/y], the AI-Generated tag, and the
human contributor's Signed-off-by on commits and recipe patch files.

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-18 12:39:55 -07:00
Khem Raj eb16d1aa1d sushi: Mark incompatible with riscv32
It depends on glycin, which is not available on riscv32.

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-18 12:39:55 -07:00
Khem Raj 558c607a9c nautilus: Mark incompatible with riscv32
It depends on glycin, which is not available on riscv32.

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-18 12:39:54 -07:00
Khem Raj cdfb2c118b loupe: Mark incompatible with riscv32
It requires libseccomp and glycin, neither of which is available on
riscv32.

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-18 12:39:54 -07:00
Khem Raj 711a18d566 glycin: Mark incompatible with riscv32
glycin unconditionally requires libseccomp, and oe-core opts riscv32 out
of the seccomp distro feature since libseccomp is not ported to rv32.

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-18 12:39:54 -07:00
Khem Raj fe84b0d478 mutter: Drop glycin from DEPENDS
mutter 51 no longer uses glycin; nothing in its build files or sources
references it.

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-18 12:39:54 -07:00
Khem Raj e7cf4b3faf samba: Enable build on riscv32
Drop the COMPATIBLE_HOST restriction for riscv32.

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-18 12:39:53 -07:00
Khem Raj 728ea355ba wrk2: Mark incompatible with riscv32
It depends on luajit, which does not support riscv32.

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-18 12:39:53 -07:00
Khem Raj 8554566388 wrk: Mark incompatible with riscv32
It depends on luajit, which does not support riscv32.

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-18 12:39:53 -07:00
Khem Raj 0d157ff168 tcmu-runner: Fix build on 32-bit targets with clang
tcmu_lba_to_byte() returns uint64_t while size_t is 32-bit on ILP32
targets, so the type-checking min() macro fails with
-Werror,-Wcompare-distinct-pointer-types. Compare in 64 bits; the
result never exceeds length, so it still fits in size_t.

Build-tested for qemuriscv32 (musl, clang).

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-18 12:39:53 -07:00
Khem Raj 4b2e478a90 tcmu-runner: Make tcmalloc support a PACKAGECONFIG
gperftools is incompatible with mips, riscv32 and riscv64, which made
tcmu-runner unbuildable there. Make tcmalloc an optional PACKAGECONFIG,
enabled by default, and disable it on those architectures.

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-18 12:39:52 -07:00
Khem Raj 551528a48d libbpf: Enable build on riscv32
It was compatible on all core supported arches except rv32, which builds
now, so remove this regexp

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-18 12:39:52 -07:00
Leon Anavi 7e47f3e37e python3-anyio: Upgrade 4.14.2 -> 4.15.1
Upgrade to release 4.15.1:

- Implemented a compatibility fix for supporting direct access of
  anyio.* submodules from the main package even when those
  submodules were not directly imported first.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-18 12:39:52 -07:00
Leon Anavi 16b75e0446 python3-alembic: Upgrade 1.19.1 -> 1.20.0
Upgrade to release 1.20.0:

usecase:

- [usecase] [batch] Added a warning for the case where an unnamed
  CHECK constraint on a reflected table is omitted from a batch
  "recreate" operation.  An unnamed CHECK constraint can't be
  reliably carried over in a batch recreate as it may refer to
  columns that are being dropped or changed.  This omission was
  previously a silent operation.   The presence of any
  ~sqlalchemy.schema.CheckConstraint in
  Operations.batch_alter_table.table_args is taken to indicate that
  the case has been accommodated, and no warning is emitted.

- [usecase] [autogenerate] Autogenerate now renders a warning
  comment above any rendered Operations.drop_constraint() directive
  for which the constraint name is None, as is the case when a
  constraint that has no name in the model is dropped, most
  typically within the downgrade() function of a migration that
  adds an unnamed constraint.  A warning is also emitted on the
  console when the migration script is generated. The directive
  requires a non-None name in order to be able to emit a "DROP
  CONSTRAINT" command.

bug:

- [bug] [batch] Fixed bug in batch mode where adding a column with
  a type that generates its own CHECK constraint, such as
  ~sqlalchemy.types.Boolean or ~sqlalchemy.types.Enum with
  ~sqlalchemy.types.Boolean.create_constraint set to True, would
  emit the constraint twice when the table was recreated, once
  under the name generated by the naming convention in use and once
  under the name given to the type.  The constraint is now emitted
  once, using the same name that would be used outside of batch
  mode.

- [bug] [batch] Fixed bug in batch mode where a CHECK constraint
  generated by a type such as ~sqlalchemy.types.Boolean or
  ~sqlalchemy.types.Enum would lose the name established for it by
  the naming convention in use when the table was recreated, as the
  constraint was regenerated against the temporary table used for
  the recreate operation.  The naming convention is now resolved
  against the name of the table being replaced.

As part of this change, a type that generates a CHECK constraint
but has no name of its own, used in conjunction with a naming
convention that includes the %(constraint_name)s token, now emits a
warning, as the convention has no name to interpolate; the
constraint continues to be emitted without a name.  As noted at
batch_check_constraints, these datatypes should be given a name in
order to participate fully in batch mode.

- [bug] [batch] Fixed bug in batch mode where the
  Operations.batch_alter_table.naming_convention parameter would
  re-generate the names of constraints that already had a name when
  reflected, in the case where the convention included the
  %(constraint_name)s token, leading to a name that included the
  convention's own prefix twice.  The convention is now applied
  only to those constraints that are reflected without a name,
  which is the use case the parameter is documented for.

- [bug] [mysql] Fixed bug where autogenerate with
  EnvironmentContext.configure.compare_server_default would report
  a persistent server default change for Float, Numeric and other
  decimal columns on MySQL. MySQL reports a literal server default
  for such a column either in quoted form, e.g. '1', or, when the
  value is fractional, as a parenthesized expression, e.g. (2.5);
  neither form was accommodated for columns other than those of
  Integer affinity, so that a default such as server_default="1" on
  a sqlalchemy.Float column would never compare as equal to the
  reflected value.

- [bug] [mysql] Fixed bug where autogenerate with
  EnvironmentContext.configure.compare_server_default would report
  a persistent server default change for an expression server
  default such as (rand()). MySQL reports such a default with the
  surrounding parenthesis included whereas MariaDB reports it
  without them, so that the parenthesis are now disregarded when
  comparing.

misc:

- [change] [general] Support for SQLAlchemy 1.4 is dropped as of
  Alembic 1.20.0; SQLAlchemy 2.0.0 is now the minimum required
  version. SQLAlchemy 1.4 has no support for Python 3.13 and above,
  and the version-conditional code paths it required throughout
  Alembic have been removed in favor of the SQLAlchemy 2.0 API.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-18 12:39:52 -07:00
Leon Anavi 36dcb28f2d python3-pybase64: Upgrade 1.5.0 -> 1.5.1
Upgrade to release 1.5.1:

- fix: swap PyBuffer_Release and PyErr_Format to prevent
  Use-After-Release

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-18 12:39:52 -07:00
Leon Anavi 3afa4ec562 python3-unidiff: Upgrade 1.0.0 -> 1.0.1
Upgrade to release 1.0.1:

- Parse consecutive added files sharing /dev/null source
- Handle empty (incl. DOS) context lines in metadata_only parsing
- Expose git submodule file mode via is_submodule
- Raise UnidiffParseError on target header without source
- Handle binary diffs without a target filename

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-18 12:39:51 -07:00
Leon Anavi 2be82b113e python3-wrapt: Upgrade 2.5.0 -> 2.5.1
Upgrade to release 2.5.1:

- A LazyObjectProxy created with an interface argument that declared
  a path-like type, such as os.PathLike or pathlib.Path, did not
  define the __fspath__() special method on the class it generated.
  Because os.fspath() looks up __fspath__() on the type of the
  object, passing such a proxy to os.fspath(), the builtin open()
  or other standard library functions accepting paths raised
  TypeError before the factory callable had been invoked to create
  the wrapped object. The __fspath__() special method is now added
  when the declared interface provides it, in the same way as is
  already done for the other special methods looked up on the type,
  so the first path conversion triggers creation of the wrapped
  object and succeeds. With thanks to Muneeb Sheikh.
- A callback passed to wrapt.WeakFunctionProxy which was callable
  but evaluated as false, such as an event emitter object which
  reports its number of subscribers via __len__() and is empty when
  first created, was passed the underlying weak reference object
  instead of the proxy when the wrapped function expired. Where the
  wrapped function was a bound method, such a callback could also
  be called twice, once each when the instance and the function
  expired. Only None is now treated as meaning no callback was
  supplied, which mirrors the behaviour of weakref.ref() and
  weakref.proxy() in the standard library, so these callbacks now
  receive the proxy and are called only once, as for any other
  callback. With thanks to Huanyi Xie.
- A wrapt.AdapterFactory instance passed as the adapter argument
  to wrapt.decorator was ignored, and so never called, if the
  instance evaluated as false, such as when the factory class
  defined __bool__() or __len__(). The decorated function then
  retained its original signature instead of that produced by the
  factory. Whether an adapter factory was supplied is now
  determined by type before the truth value of the adapter is
  considered, so such factories are always called. As a consequence
  of this change a factory can now also return None, or any other
  false value, to indicate that no adapter should be used for a
  particular function, where previously this failed with an obscure
  error. With thanks to Luochenchen.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-18 12:39:51 -07:00
Etienne Cordonnier f614fcf7d4 uutils-coreutils: link base32 base64 df mktemp nice printenv in base_bindir
GNU coreutils installs these in ${base_bindir}, so match it. This only
matters when usrmerge is not enabled, as otherwise ${base_bindir} and
${bindir} are the same directory and the generated links are unchanged.
Only the path of the update-alternatives symlinks changes (from ${bindir}
to ${base_bindir}); they still point to ${bindir}/coreutils.

Checked that the generated postinstall now links all six in /bin.

AI-Generated: Uses Claude Sonnet 5.5
Signed-off-by: Etienne Cordonnier <ecordonnier@snap.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-18 10:09:24 -07:00
Khem Raj 53c0b99a78 python3-posix-ipc: fix feature probing instead of forcing -lrt
posix_ipc decides at build time whether it needs librt and whether
message queues are available by compiling small probe programs in
build_support/discover_system_info.py. Its does_build_succeed() splices
the linker option into the compiler argv verbatim, so when no extra
library is wanted the compiler is called with a literal empty argument:

  $CC -Wall -o foo foo.c '' -lpthread

GNU ld treats '' as an input file and fails ("cannot find : No such
file or directory"); lld ignores it. With the gcc toolchain every probe
without -lrt therefore fails, the prober wrongly decides librt is
required, and on a C library without a usable librt message queue
support is dropped - which is how posix_ipc.MessageQueue went missing
(issue #916). The result depends on the linker rather than on what the
C library provides.

The previous LDFLAGS += "-lrt" workaround only papered over this, and
is itself libc specific: it forces linking librt even where mq_* live
in libc (glibc >= 2.34, musl).

Fix the prober to split linker_options with shlex, like it already does
for CC, so an empty value adds no argument, and drop the forced -lrt so
the probes decide per C library.

Verified on qemux86-64 for glibc and musl, each with the clang and gcc
toolchains: src/system_info.h defines MESSAGE_QUEUE_SUPPORT_EXISTS,
SEM_GETVALUE_EXISTS and SEM_TIMEDWAIT_EXISTS, and the extension module
imports all mq_* from libc with no librt NEEDED entry.

Fixes: https://github.com/openembedded/meta-openembedded/issues/916

AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-16 09:50:39 -07:00
Darsh Kelaiya bcc055b511 libhtml-parser-perl: checksum the LICENSE file
The 3.85 README ends at line 996, so the existing license checksum
covers only a blank line. Checksum the shipped LICENSE file instead.

Signed-off-by: Darsh Kelaiya <dkelaiya@cisco.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-16 08:26:54 -07:00
Ankur Tyagi dfdd8228b7 x265: upgrade 4.2 -> 4.3
- Update SRC_URI as official repository moved to GitHub[1]
- Replace 0001-json11.cpp-Include-cstdint.patch with upstream backport
- Refresh 0002-x265-fix-build-with-cmake-4.patch

Changelog:
https://github.com/Multicorewareinc/x265/blob/4.3/doc/reST/releasenotes.rst

[1] https://www.x265.org/#contribute

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-16 08:26:54 -07:00
Ankur Tyagi 0fd1d3c996 python3-simpleeval: upgrade 1.0.7 -> 1.0.8
Changelog:
https://github.com/danthedeckie/simpleeval/releases/tag/1.0.8

PTEST pass:

root@qemux86-64:~# ptest-runner python3-simpleeval
START: ptest-runner
2026-10-16T03:38
BEGIN: /usr/lib/python3-simpleeval/ptest
...
Testsuite summary
# TOTAL: 164
# PASS: 164
# SKIP: 0
# XFAIL: 0
# FAIL: 0
# XPASS: 0
# ERROR: 0
DURATION: 12
END: /usr/lib/python3-simpleeval/ptest
2026-10-16T03:38
STOP: ptest-runner
TOTAL: 1 FAIL: 0

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-15 22:32:08 -07:00
Ankur Tyagi 077a9459c5 python3-setproctitle: upgrade 1.3.7 -> 1.3.8
Changelog:
https://github.com/dvarrazzo/py-setproctitle/releases/tag/version-1.3.8

PTEST pass:

root@qemux86-64:~# ptest-runner python3-setproctitle
START: ptest-runner
2026-10-16T03:19
BEGIN: /usr/lib/python3-setproctitle/ptest
...
...
Testsuite summary
# TOTAL: 27
# PASS: 24
# SKIP: 3
# XFAIL: 0
# FAIL: 0
# XPASS: 0
# ERROR: 0
DURATION: 40
END: /usr/lib/python3-setproctitle/ptest
2026-10-16T03:20
STOP: ptest-runner
TOTAL: 1 FAIL: 0

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-15 22:32:08 -07:00
Ankur Tyagi a78362fc9c python3-pyjwt: upgrade 2.13.0 -> 2.14.0
Changelog:
https://github.com/jpadilla/pyjwt/blob/2.14.0/CHANGELOG.rst

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-15 22:32:08 -07:00
Ankur Tyagi c771201a90 python3-coverage: upgrade 7.16.1 -> 7.16.2
Changelog:
https://coverage.readthedocs.io/en/7.16.2/changes.html#version-7-16-2-2026-09-27

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-15 22:32:07 -07:00