Commit Graph

15933 Commits

Author SHA1 Message Date
Liu Yiding
8e285b64d0 rwmem: upgrade 1.2 -> 2.0
2. Pyrwmem and static-libc build option has been removed in 2.0.

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-23 12:22:42 -08:00
Liu Yiding
6d7dfb808d polkit: upgrade 126 -> 127
Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-23 12:22:41 -08:00
Liu Yiding
f33ce214b6 mpv: upgrade 0.40.0 -> 0.41.0
1.Changelog:
  https://github.com/mpv-player/mpv/releases/tag/v0.41.0

2.Drop 0001-mpv-fix-build-with-ffmpeg-8.0.patch as it was merged in 0.41.0.

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-23 12:22:41 -08:00
Liu Yiding
aff45d811c flatbuffers: upgrade 25.9.23 -> 25.12.19
Changelog:
  https://github.com/google/flatbuffers/releases/tag/v25.12.19

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-23 12:22:41 -08:00
Gyorgy Sarvari
2ef5be2471 ptest-packagelist.inc: sort packages alphabetically
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-22 18:20:59 -08:00
Gyorgy Sarvari
ae5a3b889d uriparser: add ptest support
It takes about a second to execute.

The test suite is covered by a different license (lgpl 2.1+) than the
main recipe (3-clause bsd).

Sample output:

root@qemux86-64:~# ptest-runner
START: ptest-runner
2025-12-22T19:34
BEGIN: /usr/lib/uriparser/ptest
[==========] Running 407 tests from 35 test suites.
[----------] Global test environment set-up.
[----------] 14 tests from CopyUriSuite
PASS:  CopyUriSuite.ErrorSourceUriNull
PASS:  CopyUriSuite.ErrorDestUriNull
[...many lines...]
PASS:  SetUserInfo.UriWithoutHostNonNullRejected
[----------] 2 tests from VersionSuite
PASS:  VersionSuite.EnsureVersionDefinesInSync
PASS:  VersionSuite.EnsureRuntimeVersionAsExpected
[----------] Global test environment tear-down
[==========] 407 tests from 35 test suites ran.
[  PASSED  ] 407 tests.
DURATION: 1
END: /usr/lib/uriparser/ptest
2025-12-22T19:34
STOP: ptest-runner
TOTAL: 1 FAIL: 0

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-22 18:20:58 -08:00
Gyorgy Sarvari
eb7b920572 uriparser: upgrade 0.9.8 -> 1.0.0
Contains fix for CVE-2025-67899

License-Update: license was moved to subfolder. There is no hash change.

Changelog:
https://github.com/uriparser/uriparser/blob/uriparser-1.0.0/ChangeLog

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-22 18:20:58 -08:00
Gyorgy Sarvari
6ff9252484 nodejs: remove extra CVE_PRODUCT
CVE_PRODUCT is specified twice - the second instance only duplicates one
value from the first instance.

Remove this extra CVE_PRODUCT.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-22 18:20:58 -08:00
Mingli Yu
70126d7110 switchtec-user: Correct SRCREV
Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-22 06:58:46 -08:00
Wang Mingyu
7a34d7963e fluentbit: upgrade 4.2.0 -> 4.2.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-21 23:29:18 -08:00
Dmitry Baryshkov
06b40fa396 vulkan-cts: upgrade 1.4.4.2 -> 1.4.5.0
Upgrade Vulkan CTS, adding support for new extensions and fixing some
older bugs, e.g. compatibility with ARMv7 (thus dropping the patches,
applied upstream) or with Vulkan 1.0.

Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@oss.qualcomm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-21 23:29:18 -08:00
Jason Schonberg
629d796af4 php: upgrade 8.5.0 -> 8.5.1
This is a security release.

Changelog: https://www.php.net/ChangeLog-8.php#8.5.1

Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-21 08:54:05 -08:00
Frede Hoey Braendstrup
84be0a8f34 dbus-cxx: upgrade 2.5.2 -> 2.6.0
Signed-off-by: Frede Hoey Braendstrup <frederikbraendstrup@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-21 08:54:05 -08:00
Wang Mingyu
31b3c8bec5 valkey: upgrade 9.0.0 -> 9.0.1
0001-src-config.h-Enable-HAVE_ARM_NEON-on-AArch64.patch
removed since it's included in 9.0.1

Changelog:
===========
- Authenticate slot migration client on source node to internal user
- Bug fix: reset io_last_written on c->buf resize to prevent stale pointers
- Sentinel: fix regression requiring "+failover" ACL in failover path
- Cluster: Avoid usage of light weight messages to nodes with not ready bidirectional links
- Send duplicate multi meet packet only for node which supports it in mixed clusters
- Fix: LTRIM should not call signalModifiedKey when no elements are removed
- Fix build on some 32-bit ARM by only using NEON on AArch64
- Fix deadlock in IO-thread shutdown during panic
- Fix COMMANDLOG large-reply when using reply copy avoidance
- Fix CLUSTER SLOTS crash when called from module timer callback

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-21 08:54:04 -08:00
Wang Mingyu
7354926b8d switchtec-user: upgrade 4.2 -> 4.3
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-21 08:54:04 -08:00
Wang Mingyu
b21de11dee osinfo-db: upgrade 20250606 -> 20251212
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-21 08:54:02 -08:00
Wang Mingyu
1d33fb39d9 microsoft-gsl: upgrade 4.2.0 -> 4.2.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-21 08:54:02 -08:00
Wang Mingyu
2fdab67ace makeself: upgrade 2.6.0 -> 2.7.1
Changelog:
============
- Base64 encoding now runs after compression, consistent with other
  post-compression encryption/encoding options.
- Documentation updated to reflect that compression can be combined with
  encryption/encoding.
- Compression now precedes encryption so both can be enabled together.
- Signing passphrases are masked in stored metadata.
- Added coverage for combined encryption + compression flows.
- Access archive name from script
- pre-extraction script execution in combination with --notemp

-Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-21 08:54:02 -08:00
Wang Mingyu
817a31b680 freerdp3: upgrade 3.19.0 -> 3.19.1
Changelog:
===========
- [core,transport] improve SSL error logging
- [utils,helpers] fix freerdp_settings_get_legacy_config_path
- From stdin and sdl-creds improve
- [crypto,certificate] sanitize hostnames
- [channels,drdynvc] propagate error in dynamic channel
- [CMake] make Mbed-TLS and LibreSSL experimental
- Json fix
- rdpecam: send sample only if it's available
- [channels,rdpecam] allow MJPEG frame skip and direct passthrough
- [winpr,utils] explicit NULL checks in jansson WINPR_JSON_ParseWithLength
- [packaging,flatpak] remove xprop

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-21 08:54:02 -08:00
Martin Schwan
16493d4c1d thingsboard-gateway: upgrade 3.7.4 -> 3.8.0
With thingsboard-gateway 3.8.0, the source URI must be set to the
project Git repository, as source releases are no longer provided via
PyPi for this project.

Signed-off-by: Martin Schwan <m.schwan@phytec.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-21 08:54:01 -08:00
Yi Zhao
73a3d53c6b tk: upgrade 9.0.2 -> 9.0.3
ChangeLog:
https://wiki.tcl-lang.org/page/Changes+in+Tcl%2FTk+9.0.3

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-21 08:54:01 -08:00
Gyorgy Sarvari
6ba3a13cce zsync-curl: update to latest revision
Drop the incorporated patches.

Shortlog:
00141c2806...e0a7bbbcc1

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-21 08:54:01 -08:00
Liu Yiding
3610506794 double-conversion: upgrade 3.3.1 -> 3.4.0
Drop 0001-allow-build-with-cmake-4.patch as it was merged upstream.

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-20 11:41:03 -08:00
Liu Yiding
c9fb53c552 libopusenc: upgrade 0.2.1 -> 0.3
Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-20 11:41:03 -08:00
Gyorgy Sarvari
df462075be minio: ignore irrelevant CVEs
The minio umbrella covers multiple projects. The recipe itself builds
"minio client", which is a set of basic tools to query data from
"minio server" - like ls, mv, find...

The CVEs were files against minio server. Looking at the go mod list,
this recipe doesn't use minio server even as a build dependency - so ignore
the CVEs.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-16 19:57:33 -08:00
Gyorgy Sarvari
88ebc14186 botan: add ptest support
The test suite takes just around 30s to execute.

Sample output:

root@qemux86-64:~# ptest-runner
START: ptest-runner
2025-12-15T19:02
BEGIN: /usr/lib/botan/ptest
PASS: AES-128/CCM(10,2)
PASS: AES-128/CCM(12,2)
PASS: AES-128/CCM(14,2)
PASS: AES-128/CCM(16,2)
PASS: AES-128/CCM(16,3)
PASS: AES-128/CCM(16,4)
[...lots of lines...]
PASS: XMSS/SHAKE_16_512 verify invalid signature
PASS: XMSS/SHAKE_20_256 verify invalid signature
PASS: XMSS/SHAKE_20_512 verify invalid signature
PASS: ZFEC encoding/decoding
Tests complete ran 3375688 tests in 28.38 sec all tests ok
DURATION: 29
END: /usr/lib/botan/ptest
2025-12-15T19:02
STOP: ptest-runner
TOTAL: 1 FAIL: 0

Tested also by forcing some tests to fail, which was also displayed correctly.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-16 19:57:33 -08:00
Gyorgy Sarvari
a45d5c0f2e imagemagick: upgrade 7.1.2-8 -> 7.1.2-11
Contains fix for CVE-2025-65955

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-16 19:57:32 -08:00
Gyorgy Sarvari
8217b90e94 postgresql: upgrade 17.6 -> 17.7
It contains fixes for CVE-2025-12817 and CVE-2025-12818.

Changelog:
https://www.postgresql.org/docs/release/17.7/

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-16 19:57:32 -08:00
Gyorgy Sarvari
a275078cbe fio: ignore CVE-2025-10824
Details: https://nvd.nist.gov/vuln/detail/CVE-2025-10824

The upstream maintainer wasn't able to reproduce the issue[1],
and the related bug is closed without further action.

[1]: https://github.com/axboe/fio/issues/1981

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-16 19:57:32 -08:00
Peter Marko
3916c15a77 libwebsockets: upgrade 4.3.5 -> 4.5.2
Handles CVE-2025-11677, CVE-2025-11678, CVE-2025-11679 and
CVE-2025-11680.

* drop patches included in this release
* update license
* add packageconfig for examples as those don't build

License-Update: added new license, see:
https://libwebsockets.org/git/libwebsockets/commit?id=e3dca87f23e8f783e1008b54829b39f9d7b083df

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-16 19:57:32 -08:00
Khem Raj
b3de57b339 libopus: Make ne10 dependency to be target specific for arm/arm64
This ends up in the native/nativesdk depchains especially when
building on arm64 build hosts.

Fixes errors e.g.

WARNING: Nothing RPROVIDES 'nativesdk-libopus-dev' (but virtual:nativesdk:/srv/build/yoe/sources/meta-openembedded/meta-oe/recipes-multimedia/libopus/libopus_1.5.2.bb RDEPENDS on or otherwise requires it)
No eligible RPROVIDERs exist for 'nativesdk-libopus-dev'

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-14 16:10:16 -08:00
Gyorgy Sarvari
7f9a95df96 libconfig: drop recipe
The recipe has been moved to oe-core:
https://git.openembedded.org/openembedded-core/commit/?id=1a0196a794f8858c4715871558e97c3d69deb19e

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-14 11:52:30 -08:00
Etienne Cordonnier
d50131ca7c uutils-coreutils: upgrade 0.4.0 -> 0.5.0
See https://github.com/uutils/coreutils/releases/tag/0.5.0

Signed-off-by: Etienne Cordonnier <ecordonnier@snap.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-14 09:16:31 -08:00
Khem Raj
5e504c79a1 wavpack: Delete unused patches
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-14 02:45:02 -08:00
Khem Raj
aafa4714c5 vk-gl-cts: Delete unused patch
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-14 02:45:02 -08:00
Khem Raj
e4903f618a openocd: Delete unused patch
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-14 02:45:02 -08:00
Khem Raj
67bd590ba9 geany-plugins: Delete unused patches
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-14 02:45:01 -08:00
Khem Raj
c89e5b9e2d packagegroups: Remove packages not yet ported onto riscv32
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-13 00:54:16 -08:00
Deepesh Varatharajan
9ddb4b60f7 ripgrep: limit libstd-rs DEPENDS to class-target
Avoid pulling in a non-existent libstd-rs-native dependency by
restricting libstd-rs to class-target builds.

Signed-off-by: Deepesh Varatharajan <Deepesh.Varatharajan@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-12 22:37:46 -08:00
Jason Schonberg
996768e080 c-ares: upgrade 1.34.5 -> 1.34.6
Drop memory leak patch which has already been included in this new version.

The new version also includes a fix for CVE 2025-62408.

Changelog: https://github.com/c-ares/c-ares/releases/tag/v1.34.6

Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-12 22:27:45 -08:00
Peter Kjellerstedt
fc0152e434 Revert "proj: Fix do_package QA issue for unshipped bash-completion files"
This reverts commit 1175d5c8c1.

Since this recipe inherits bash-completion, adding
${datadir}/bash-completion to FILES:${PN} should not be needed (in
addition to being the wrong thing to do as the files are expected to be
packaged in the ${PN}-bash-completion package). The reason the problem
addressed in commit 1175d5c8c1 turned up
is due to the recent change to the bash-completion bbclass, where it
started to use PACKAGE_BEFORE_PN. This clashed with the lib_package
bbclass, which used to set rather than add to PACKAGE_BEFORE_PN, and
since it is inherited after bash-completion, it overrid what
bash-completion does.

Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-11 09:32:46 -08:00
Yi Zhao
7a14123a66 conf/version-check.conf: skip version check for glslang
There are two different types of tags in glslang git repo. One is the
release tag of the project itself: 15.2.0, 14.3.0, etc. The other tag is
for Vulkan SDK: vulkan-sdk-1.4.309, vulkan-sdk-1.4.304.1, etc.

The vulkan sdk tag is used for glslang in openembedded-core because it
needs to update in locksetup with vulkan, which leads to a mismatch
between the runtime version and the build version. Set CHECK_VERSION_PV
for it to skip the version check.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-11 00:16:16 -08:00
Dmitry Baryshkov
374949c531 vulkan-cts: upgrade 1.4.4.0 -> 1.4.4.2
Upgrade Vulkan CTS to the point release, fixing several tests. While we
are at it, refresh Vulkan-Video-Samples patches.

Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@oss.qualcomm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-11 00:16:15 -08:00
Khem Raj
75f1c414fe fd-find: Fix build on riscv32
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Cc: Deepesh Varatharajan <Deepesh.Varatharajan@windriver.com>
2025-12-10 12:13:04 -08:00
Dmitry Baryshkov
b77403017b opencv: fill in missing FastCV gaps
When OpenCV is being built with the "fastcv" packageconfig, several
OpenCV libs are linked against the libfastcv.a. At runtime this lib will
dlopen(libfastcvopt.so.1), providing a fallback to slow algorithms, etc.
However as it is dlopen() rather than dynamic linking, there is no
runtime dependency.

In Yocto, if we enable a feature, we expect that all runtime
dependencies are pulled in. Utilize the qcom-fastcv-binaries recipe
provided by the meta-qcom layer and pull in libfastcvopt1 package as
required.

Cc: Pulkit Singh Tak <ptak@qti.qualcomm.com>
Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@oss.qualcomm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-10 08:58:49 -08:00
Weisser, Pascal
f1193ecbf8 rwmem: Add HOMEPAGE variable
Add HOMEPAGE variable to rwmem recipe.

Signed-off-by: Weisser, Pascal <pascal.weisser.ext@karlstorz.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-10 08:58:49 -08:00
Weisser, Pascal
44c58a99e6 can-utils: Add HOMEPAGE variable
Add HOMEPAGE variable to can-utils recipe.

Signed-off-by: Weisser, Pascal <pascal.weisser.ext@karlstorz.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-10 08:58:48 -08:00
Weisser, Pascal
c5cbd25b40 pointercal: Add HOMEPAGE variable
Add HOMEPAGE variable to pointercal recipe.

Signed-off-by: Weisser, Pascal <pascal.weisser.ext@karlstorz.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-10 08:58:48 -08:00
Weisser, Pascal
350f0c88c8 vboxguestdrivers: Add HOMEPAGE variable
Add HOMEPAGE variable to vboxguestdrivers recipe.

Signed-off-by: Weisser, Pascal <pascal.weisser.ext@karlstorz.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-10 08:58:48 -08:00
Weisser, Pascal
5f933c8988 v4l-utils: Add HOMEPAGE variable
Add HOMEPAGE variable to v4l-utils recipe.

Signed-off-by: Weisser, Pascal <pascal.weisser.ext@karlstorz.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-10 08:58:48 -08:00