Commit Graph
40529 Commits
Author SHA1 Message Date
Ankur Tyagi bd5cb548e6 leancrypto: upgrade 1.9.0 -> 1.9.1
License-Update: added SNTRUP license[1]

Changelog:
https://github.com/smuellerDD/leancrypto/releases/tag/v1.9.1

[1]https://github.com/smuellerDD/leancrypto/commit/cbf0afac87ed2c97d8b0b72dcf236c113d955823

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-01 07:40:51 -07:00
Ankur Tyagi ede4963c60 iperf3: upgrade 3.21 -> 3.22
Notable user-visible changes:
- Attempting to set zero parallel streams is no longer allowed.
- Zerocopy and rx-copy are now allowed in the case of reverse
  direction tests and the server (sending side) supports these
  features but the client (receiving side) does not.
- The limit on GSO_MAX_DG_IN_BF was fixed to limit the number of segments
  to the maximum allowed. This change unbreaks GSO for small message sizes.

Changelog:
https://github.com/esnet/iperf/releases/tag/3.22

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-01 07:40:51 -07:00
Ankur Tyagi b2c7b2bed8 frr: upgrade 10.6.1 -> 10.6.2
Dropped patch that is part of the upstream version.

Changelog:
https://github.com/FRRouting/frr/releases/tag/frr-10.6.2

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-01 07:40:50 -07:00
Ankur Tyagi 1ce2305241 squid: upgrade 7.6 -> 7.7
Also refresh patches for the new version.

Changelog:
https://github.com/squid-cache/squid/blob/SQUID_7_7/ChangeLog

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-01 07:40:50 -07:00
Ankur Tyagi 66ef716691 iscsi-initiator-utils: upgrade 2.1.12 -> 2.1.13
Changelog:
https://github.com/open-iscsi/open-iscsi/releases#release-2.1.13

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-01 07:40:50 -07:00
Ankur Tyagi 283e3a3b96 wolfssl: upgrade 5.9.2 -> 5.9.4
Changelog:
https://github.com/wolfSSL/wolfssl/releases/tag/v5.9.4-stable

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-01 07:40:50 -07:00
Ankur Tyagi 07d2c63bb1 dhcp-relay: set UPSTREAM_VERSION_UNKNOWN
As per https://www.isc.org/download/#DHCP, software has reached EOL

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-01 07:40:50 -07:00
Ankur Tyagi 07527be72a vlc: upgrade 3.0.23 -> 3.0.24
Changelog:
https://github.com/videolan/vlc/blob/3.0.24/NEWS

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-01 07:40:50 -07:00
Ankur Tyagi 3596eab3e0 spandsp: upgrade 3.0.0 -> 3.1.1
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-01 07:40:49 -07:00
Ankur Tyagi f58ad5704a gerbera: upgrade 3.2.1 -> 3.3.0
Dropped patches that are part of the upstream version.

Changelog:
https://github.com/gerbera/gerbera/releases/tag/v3.3.0

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-01 07:40:49 -07:00
Ankur Tyagi ebebcaf570 wireplumber: upgrade 0.5.17 -> 0.5.18
Changelog:
https://gitlab.freedesktop.org/pipewire/wireplumber/-/blob/0.5.18/NEWS.rst?ref_type=tags

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-01 07:40:49 -07:00
Ankur Tyagi 8c58d3493f pipewire: upgrade 1.6.8 -> 1.6.9
Changelog:
https://gitlab.freedesktop.org/pipewire/pipewire/-/blob/1.6.9/NEWS?ref_type=tags

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-01 07:40:49 -07:00
Ankur Tyagi 32c2eab0bc aom: upgrade 3.14.1 -> 3.15.1
Changelog:
https://aomedia.googlesource.com/aom/+/refs/tags/v3.15.1/CHANGELOG

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-01 07:40:49 -07:00
Ankur Tyagi 17986e9538 glycin: upgrade 2.2.0 -> 2.2.1
Changelog:
https://gitlab.gnome.org/GNOME/glycin/-/blob/2.2.1/NEWS?ref_type=tags

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-01 07:40:49 -07:00
Ankur Tyagi e7aac0278d gnome-online-accounts-gtk: upgrade 3.50.10 -> 3.50.11
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-01 07:40:48 -07:00
Ankur Tyagi d50511530a xfsprogs: upgrade 7.1.1 -> 7.2.0
Changelog:
https://git.kernel.org/pub/scm/fs/xfs/xfsprogs-dev.git/tree/doc/CHANGES?id=84c54d6c0c3b65a3d1f10c4d3ac926bf9ef49b0b

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-09-30 19:09:37 -07:00
Ankur Tyagi 3c05b3778f ufs-utils: upgrade 7.14.12 -> 8.14.12
Also dropped UPSTREAM_CHECK_COMMITS as upstream uses release tags.

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-09-30 19:09:37 -07:00
Ankur Tyagi 8d1af555e3 udevil: add UPSTREAM_CHECK variables
Fixes:
$ devtool latest-version udevil
...
INFO: Current version: 0.4.4
INFO: Latest version:

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-09-30 19:09:36 -07:00
Ankur Tyagi ede029088f overlayfs-tools: rename PV v2025.01 -> 2025.01
Also update tag and add UPSTREAM_CHECK_GITTAGREGEX, SRCREV is unchanged.

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-09-30 19:09:36 -07:00
Ankur Tyagi 3d0d87d225 nilfs-utils: rename PV v2.3.1 -> 2.3.1
Also update tag and add UPSTREAM_CHECK_GITTAGREGEX, SRCREV is unchanged.

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-09-30 19:09:36 -07:00
Ankur Tyagi 9a88ddfcd3 fatresize: add UPSTREAM_CHECK_GITTAGREGEX variable
Fixes:
$ devtool latest-version fatresize
...
INFO: Current version: 1.1.0-3
INFO: Latest version:

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-09-30 19:09:36 -07:00
Ankur Tyagi b2f8869605 exfatprogs: upgrade 1.4.2 -> 1.4.3
Changelog:
https://github.com/exfatprogs/exfatprogs/releases/tag/1.4.3

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-09-30 19:09:36 -07:00
Ankur Tyagi 66f1145b72 exfatprogs: update UPSTREAM_CHECK_REGEX variable
Fixes:
$ devtool latest-version exfatprogs
...
INFO: Current version: 1.4.2
INFO: Latest version:

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-09-30 19:09:36 -07:00
Ankur Tyagi 33ee95df96 owfs: add UPSTREAM_CHECK_GITTAGREGEX variable
Fixes:
$ devtool latest-version owfs
...
INFO: Current version: 3.2p4
INFO: Latest version: 3.2

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-09-30 19:09:35 -07:00
Ankur Tyagi 06cca0bd05 ntfs-3g-ntfsprogs: upgrade 2026.7.7 -> 2026.9.28
Changelog:
https://github.com/tuxera/ntfs-3g/releases/tag/2026.9.18
https://github.com/tuxera/ntfs-3g/releases/tag/2026.9.28

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-09-30 19:09:35 -07:00
Ankur Tyagi 28d1ab32e4 fuse-exfat: add UPSTREAM_CHECK_REGEX variable
Fixes:
$ devtool latest-version fuse-exfat
...
INFO: Current version: 1.4.0
INFO: Latest version:

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-09-30 19:09:35 -07:00
Ankur Tyagi 42720600e2 ifuse: add UPSTREAM_CHECK variables
Fixes:
$ devtool latest-version ifuse
...
INFO: Current version: 1.2.1
INFO: Latest version:

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-09-30 19:09:35 -07:00
Ankur Tyagi 5a934bc2a2 fuse-archive: upgrade 1.22 -> 1.24
Changelog:
https://github.com/google/fuse-archive/releases/tag/v1.24

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-09-30 19:09:35 -07:00
Ankur Tyagi b2b2a73367 libdevmapper,lvm2: upgrade 2.03.42 -> 2.03.43,2.03.42 -> 2.03.43
Update 0001-Avoid-bashisms-in-init-scripts.patch as cluster mirror log
daemon is dropped[1]

Changelog:
- Wipe stale signatures before formatting a VDO data LV on thin storage.
- Warn on non-power-of-2 thin pool chunk size; prompt when --chunksize is used.
- Fix lvmpolld shutdown when reaping a finished client thread.
- Fix dmeventd raid repair after partial replacement or resync completion.
- Retry failed dmeventd snapshot extension with exponential backoff.
- Fix dmeventd snapshot threshold advance when lvextend failed.
- Fix dmeventd snapshot unmount on Invalid/Overflow, not 100% usage alone.
- Reject undersized --pooldatavdo conversion before allocating pool metadata.
- Allow lvchange --refresh and properties on hidden thin and cache pool sub LVs.
- Allow 4K stripe size smaller than page size (except on DAX and MD RAID).
- Set recursion limit to 1024 LVs when processing device tree.
- Remove cmirrord and clustered mirror log daemon support.
- Remove legacy vgimportclone.sh script (superseded by native vgimportclone).
- Respect /run/mdadm/creating-<md_dev_name> in 69-dm-lvm.rules.
- Add `lvmconfig --edit Section/Field=Value` to set an lvm.conf setting.
- Add `lvmconfig --edit Section/Field=-` to remove an lvm.conf setting.
- Fix use-after-free of host tag list on toolcontext refresh.
- Fix memleak of config tree list nodes on toolcontext refresh.
- Fix lvmconfig output of merged and unregistered config nodes.
- Recurse into subsections when merging config trees.
- Make lvmpersist reject non-block devices and unsupported device types.
- Make lvmpersist validate `--vg`/`--device` and key options before use.
- Make lvmpersist check for required PR tools (sg_persist, nvme, mpathpersist, jq).
- Make lvmpersist clean up registered keys when interrupted during start/takeover.
- Make lvmpersist report failures from start, stop, clear, remove and query commands.
- Fix lvmpersist `--vg` device list splitting to avoid pathname expansion.

[1]https://sourceware.org/git/?p=lvm2.git;a=commit;h=f999dcc03828d097d0cd7288c224efdc07c44ac7

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-09-30 19:09:35 -07:00
Ryan Eatmon 67d4569d1d libnetfilter-log: Move protocol=https into SRC_URI
Move the protocol=https into the SRC_URI so that both mirrors use it
instead of the git protocol.

Signed-off-by: Ryan Eatmon <reatmon@ti.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-09-30 19:09:34 -07:00
Ryan Eatmon 42d3a4a250 libnetfilter-queue: Move protocol=https into SRC_URI
Move the protocol=https into the SRC_URI so that both mirrors use it
instead of the git protocol.

Signed-off-by: Ryan Eatmon <reatmon@ti.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-09-30 19:09:34 -07:00
Ryan Eatmon 5e2bf38269 libnftnl: Move protocol=https into SRC_URI
Move the protocol=https into the SRC_URI so that both mirrors use it
instead of the git protocol.

Signed-off-by: Ryan Eatmon <reatmon@ti.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-09-30 19:09:34 -07:00
Ryan Eatmon 3110058475 ulogd2: Move protocol=https into SRC_URI
Move the protocol=https into the SRC_URI so that both mirrors use it
instead of the git protocol.

Signed-off-by: Ryan Eatmon <reatmon@ti.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-09-30 19:09:34 -07:00
Markus Volk 662a2bb7c6 ibus: backport fix for a use-after-free of the preedit attributes
ibus_input_context_convert_text() replaced the attribute list of an
IBusText with a new, floating list without sinking it. gjs sinks the
floating reference when gnome-shell calls get_attributes(), so gjs and
the IBusText end up sharing a single reference, and whichever releases
it second unrefs a freed object. gnome-shell crashes with SIGSEGV in
ibus_text_destroy(), typically while typing with dead keys, which ends
the session.

The same crash is reported in Debian:
https://bugs.debian.org/1146664

AI-Generated: Uses Claude Code (Claude Opus 5.5)
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-09-30 19:09:34 -07:00
Ross Burton 1435d76cda postgresql: work around occasional build failures due to a dependency race
There are two routes to building jsonapi.o, and one of them adds CPPFLAGS
that then break the build.  Ensure the correct route is always taken by
explicitly building it first.

This has been reported upstream and more details are in the linked mail.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-09-30 19:09:34 -07:00
Deepesh Varatharajan 44bdac6abf librust-cxx: upgrade 1.0.197 -> 1.0.202
Update cxx crate from 1.0.197 to 1.0.202.

Changes in this update:

v1.0.198:
- Update to syn 3

v1.0.199:
- Suppress clone_on_copy clippy lint in generated code

v1.0.200:
- Do not classify references as guaranteed POD

v1.0.201:
- Specialize enable_borrowed_range and enable_view for rust::Slice<T>
- Register bazel toolchains as dev dependencies

v1.0.202:
- Support build environments that limit build-script filesystem writes
  outside of OUT_DIR

Assisted-by: Kiro CLI 2.12.0 (AI assistant)
Signed-off-by: Deepesh Varatharajan <Deepesh.Varatharajan@windriver.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-09-30 19:09:34 -07:00
Deepesh Varatharajan d22818f488 nushell: upgrade 0.114.1 -> 0.116.0
Update nushell from 0.114.1 to 0.116.0.

Highlights across v0.115.0 - v0.116.0:

Breaking changes:
- YAML support reworked on serde-saphyr/granit-parser: defaults to YAML 1.2
  (use --spec 1.1 for old behavior), proper tag support, multi-document
  streams, anchors/aliases/merge keys, stricter mapping keys
- Parser keywords can no longer be shadowed (e.g. `def def [] {}` errors)
- The `nu` binary no longer ships with `--testbin`
- Removed `idx import`/`idx export`; `idx init` is now the single way to
  build the in-memory index
- Unified custom completions: one shared input/output model across
  parameter, command-wide, external completers and menu sources; existing
  custom completers/menu sources may need updating. Removed the global
  `background-completions` option (use the `@interactive` attribute)
- `to yaml`/`to yml` `--compact-list-indent` replaced with `--list-indent`

Features:
- New `$ans` reserved variable holding the last REPL result (output,
  duration, exit code, command); `$ans.last` opt-in via
  $env.config.max_last_result_size
- New Helix/Kakoune-style `helix` edit mode
- New `matrix` custom value type with 21 subcommands (ndarray-backed)
- New `tui` command family to build interactive terminal UIs from a pipeline
- `nu --dap` starts a Debug Adapter Protocol server for debugging scripts
- KDL v1/v2 support and JSON-in-KDL output for `from kdl`/`to kdl`
- Comparison operators and loose parsing for `semver` values
- More interactive `tutor` lessons (shortcuts, $env, custom commands,
  pipeline input, if/match/where)
- `any`/`all` accept row conditions like `where`; `--include` for
  `take while`/`take until`; `hash sha512`; `mkdir --fail-if-exists`;
  `save --force` creates parent dirs; `update cells --recursive`;
  named-flag null omit/pass-through and record spread into named flags

Bugfixes:
- Numerous fixes to try/catch/finally ordering, completions, YAML float
  token parsing, format date locales, tables, and more

Release notes:
- https://www.nushell.sh/blog/2026-08-15-nushell_v0_115_0.html
- https://www.nushell.sh/blog/2026-09-26-nushell_v0_116_0.html

Assisted-by: Kiro CLI 2.12.0 (AI assistant)
Signed-off-by: Deepesh Varatharajan <Deepesh.Varatharajan@windriver.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-09-30 19:09:33 -07:00
Deepesh Varatharajan e2fbbdddee fd-find: update 10.4.2 -> 10.5.0
The new release adds --ignore-parent and --exact options and fixes
several issues including terminal output sanitization, invalid working
directory handling, and search pattern path separator handling.

Complete changes can be found here:
https://github.com/sharkdp/fd/compare/v10.4.2...v10.5.0

Drop merged patch:
0001-Define-ALIGNOF_MAX_ALIGN_T-for-riscv32.patch
https://github.com/tikv/jemallocator/commit/f4fde3f8f572b804adf15cf4c68b826109f8c36b

Signed-off-by: Deepesh Varatharajan <Deepesh.Varatharajan@windriver.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-09-30 19:09:33 -07:00
Markus Volk 397ead5318 ptyxis: add recipe
Ptyxis is a GTK 4 terminal for GNOME with first-class support for
containers. It is the default terminal in Fedora Workstation and
Ubuntu.

Build it from the release tarball.

AI-Generated: Uses Claude Code (Claude Opus 5.5)
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-09-30 19:09:33 -07:00
Ankur Tyagi 77e2d6e3fc freerdp3: upgrade 3.30.0 -> 3.32.1
Changelog:
https://github.com/FreeRDP/FreeRDP/releases/tag/3.31.0
https://github.com/FreeRDP/FreeRDP/releases/tag/3.31.1
https://github.com/FreeRDP/FreeRDP/releases/tag/3.32.0
https://github.com/FreeRDP/FreeRDP/releases/tag/3.32.1

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-09-30 19:09:33 -07:00
Ankur Tyagi dda9d25300 upower: upgrade 1.91.3 -> 1.91.4
Changelog:
https://gitlab.freedesktop.org/upower/upower/-/blob/v1.91.4/NEWS?ref_type=tags

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-09-30 19:09:33 -07:00
Ankur Tyagi 213ac2cd45 poco: upgrade 1.15.3 -> 1.15.4
Refreshed patches for the new version.

Behaviour changes:
- client contexts created from the SSLManager configuration verify the host
  name by default
- FTPSClientSession no longer falls back to plaintext when the server
  refuses TLS, unless allowPlaintextFallback() is called
- HTTP requests with duplicate or conflicting framing headers are rejected
- URIStreamOpener and HTTPSStreamFactory follow redirects only to http and
  https.

Changelog:
https://github.com/pocoproject/poco/releases/tag/poco-1.15.4-release

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-09-30 19:09:33 -07:00
Ankur Tyagi 672ad8f6ad librdkafka: upgrade 2.15.0 -> 2.15.1
Upgrade considerations:

- If you're parsing the nodename as received by connect_cb,
stats_cb, ssl_cert_verify_cb or throttle_cb, make sure you're
correctly parsing it following RFC 3986. Metadata API calls
are unaffected: they return the host and port as separate
fields.
- Make sure the brokers' certificates carry the IP in an
iPAddress entry, not a dNSName entry. Previously the
certificate was validated against dNSName (falling back to the
subject CN) whenever the address could not be parsed as an IP
literal: with OpenSSL < 3.0 or BoringSSL for any IP address,
and on all OpenSSL versions for an IPv6 address configured in
brackets in bootstrap.servers ([::1]:9092), which never
verified. A scoped address (fe80::1%eth0) was likewise
dNSName-matched on every version and now has the zone
stripped before matching. IPv6 addresses ending in :: could
not be connected to at all, as the nodename became host:::port
and failed name resolution. In the remaining cases, a bare
IPv4 or IPv6 literal on OpenSSL >= 3.0, the iPAddress entry
was already used, and behaviour is unchanged.

Changelog:
https://github.com/confluentinc/librdkafka/releases/tag/v2.15.1

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-09-30 19:09:32 -07:00
Ankur Tyagi 99797c2880 libp11: upgrade 0.4.20 -> 0.4.21
Changelog:
https://github.com/OpenSC/libp11/releases/tag/libp11-0.4.21

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-09-30 19:09:32 -07:00
Ankur Tyagi f6ca00dabf liboauth2: upgrade 2.3.0 -> 2.4.0
Changelog:
https://github.com/OpenIDC/liboauth2/releases/tag/v2.4.0

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-09-30 19:09:32 -07:00
Ankur Tyagi 0d06fdee72 libmxml: upgrade 4.0.5 -> 4.0.6
Changelog:
https://github.com/michaelrsweet/mxml/releases/tag/v4.0.6

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-09-30 19:09:32 -07:00
Ankur Tyagi a43acbb5e5 imagemagick: upgrade 7.1.2-30 -> 7.1.2-32
Changelog:
https://imagemagick.org/changelog/#gsc.tab=0

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-09-30 19:09:32 -07:00
Sergio Prado 3db1e5866f polkit: fix /etc/polkit-1/rules.d permissions
The recipe installs /etc/polkit-1/rules.d as polkitd:root 0700, but
polkit's own tmpfiles.d entry declares it as root:polkitd 0750:

  d /etc/polkit-1/rules.d 0750 root polkitd - -

As a result, systemd-tmpfiles changes the ownership and mode of the
directory at every boot, and on a read-only root filesystem it fails
with:

  systemd-tmpfiles[241]: fchownat() of /etc/polkit-1/rules.d failed: Read-only file system

The polkitd:root 0700 ownership was added to avoid rpm conflicts with the
polkit-group-rule-* packages, which no longer install into /etc since
commit d5e90541f8.

Match upstream instead. This is also the stricter setting, as polkitd
can read the rules but cannot modify them.

Signed-off-by: Sergio Prado <sergio.prado@e-labworks.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-09-29 22:19:48 -07:00
Markus Volk d6dc6766eb bmap-writer: honour ImageSize for the last block
Writing an image whose size is not a multiple of the bmap block size
failed at its last block with "Image ended before the block map did",
because every range was taken to end at (endBlock + 1) * BlockSize.
Add a patch that reads ImageSize from the bmap and clamps the ranges to
it.

Tested by writing a wic image whose size ends 2048 bytes into its
last 4 KiB block to an NVMe disk.

AI-Generated: Uses Claude Code (Claude Fable 5.1)
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-09-29 22:19:48 -07:00
Khem Raj 69631d19d6 rtc-testbench: Fix build with musl
Cast socket addresses to struct sockaddr * for bind() and sendto(), since
musl has no transparent union for them like glibc, and pin threads with
pthread_setaffinity_np() after creation where
pthread_attr_setaffinity_np() is not available.

AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-09-29 15:35:17 -07:00