Commit Graph
41397 Commits
Author SHA1 Message Date
Markus Volk e2778e49f7 glycin: upgrade 2.2.3 -> 2.2.6
Regenerate glycin-crates.inc.

AI-Generated: Uses Claude Code (Claude Opus 5.5)
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-13 08:19:28 -08:00
Markus Volk 8fd931a7cf devilspie2: upgrade 0.44 -> 0.45
0.45 uses the WnckHandle API, which libwnck for gtk2 lacks, so build
against gtk+3 and libwnck3. COPYING holds the GPLv3 text now and
GPL3.txt is gone; the sources are GPL-3.0-or-later. Pass PREFIX to
make in do_compile too, so LOCALEDIR is not /usr/local/share/locale.

AI-Generated: Uses Claude Code (Claude Opus 5.5)
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-13 08:19:28 -08:00
Markus Volk 87fde34ff0 tepl: upgrade 6.14.0 -> 6.15.0
AI-Generated: Uses Claude Code (Claude Opus 5.5)
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-13 08:19:28 -08:00
Markus Volk 4efa437bb5 gedit: upgrade 50.0 -> 51.0
The default branch is main now.

AI-Generated: Uses Claude Code (Claude Opus 5.5)
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-13 08:19:28 -08:00
Markus Volk aca56d1854 libgedit-gtksourceview: upgrade 299.6.0 -> 299.8.0
It depends on libgedit-gfls and libgedit-amtk now.

AI-Generated: Uses Claude Code (Claude Opus 5.5)
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-13 08:19:28 -08:00
Markus Volk 1df505512d libgedit-gfls: upgrade 0.4.2 -> 0.5.0
The default branch is main now.

AI-Generated: Uses Claude Code (Claude Opus 5.5)
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-13 08:19:27 -08:00
Markus Volk 790d73e9b8 libgedit-amtk: upgrade 5.9.0 -> 5.11.0
5.10 and 5.11 are released as git tags only, so fetch from git.
libgedit-gtksourceview 299.8.0 requires amtk >= 5.11.

AI-Generated: Uses Claude Code (Claude Opus 5.5)
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-13 08:19:27 -08:00
Khem Raj 73caca3af7 python3-dnspython: Retry socket timeouts in ptests
testQueryUDPFallbackWithSocket fails intermittently because it connects
its TCP socket with a 2s socket timeout, and the resulting TimeoutError
is not dns.exception.Timeout, so the test's retry_on_timeout decorator
does not retry it. Retry TimeoutError too and give the connect the same
4s budget as the query.

AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-12 23:24:51 -08:00
Leon Anavi 21a8d06323 python3-faker: Upgrade 40.44.0 -> 40.54.0
Upgrade to release 40.54.0:

- Fix: bn_BD swift_bank_codes and swift11 length.

For previous releases:

- Fix: allow the digit 9 in the first eight positions of an en_CA
  SIN
- Fix: generate valid it_IT VAT IDs in vat_id()
- Fix: reject non-positive precision in time_series
- Fix: avoid random offsets for equal parsed date_time_between
  bounds
- Docs: add faker-cti to community providers
- Fix: respect zero fractional digits for positive pyfloat fallback
- Fix: generate valid bg_BG VAT check digits
- Fix: pass tzinfo through when resolving relative
  date_time_between_dates bounds
- Fix: allow repeated digits in numeric pt_BR CNPJ roots
- Update the base currency list to current ISO 4217

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-12 20:55:00 -08:00
Leon Anavi a371125ae4 python3-cucumber-expressions: Upgrade 20.1.0 -> 20.2.0
Upgrade to release 20.2.0:

Added:

- [CPP] initial C++ implementation.
- [Dart] Add a Dart implementation of Cucumber Expressions

Fixed:

- [Java] Fix project url

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-12 20:55:00 -08:00
Leon Anavi 166a07306b python3-cmd2: Upgrade 4.4.1 -> 4.4.2
Upgrade to release 4.4.2 with security fixes:

- Fixed shell command injection through file names in the edit
  command and Cmd.run_editor(). A file name containing shell
  syntax such as $(...) or backticks was interpreted by the
  shell instead of being passed to the editor as-is. On
  Windows, run_editor() now raises ValueError for an editor or
  file path containing a double quote, which cannot be passed
 safely to cmd.exe.

- The persistent history file is now readable and writable only
  by its owner (mode 0600 on POSIX), since history can contain
  secrets typed as command arguments. The permissions of an
  existing history file are tightened the next time history is
  saved.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-12 20:54:59 -08:00
Leon Anavi dbacd7aaae python3-cbor2: Upgrade 6.2.0.post2 -> 6.2.1
Upgrade to release 6.2.1:

- Fixed a segmentation fault on Python 3.12-3.13 when hashing,
  comparing or printing a self-referential CBORTag decoded from
  untrusted CBOR data, such as when used as a map key or set
  element; a catchable RuntimeError (wrapped in a CBORDecodeError
  during decoding) is now raised instead (GHSA-6rgc-8hxm-rj7p)
- Corrected the semantic-decoder example for immutable sets

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-12 20:54:59 -08:00
Leon Anavi bb6805a729 python3-annotated-doc: Upgrade 0.0.5 -> 0.0.6
Upgrade to release 0.0.6:

Breaking Changes:

- Drop support for Python 3.9.

Upgrades:

- Add support for Python 3.15 and 3.15t.

Docs:

- Enable Ruff formatting for Python in Markdown.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-12 20:54:59 -08:00
Khem Raj 6a0b61aa0e gperftools: Drop obsolete musl patches
ppc-musl.patch no longer applies after the 2.19.3 upgrade, failing
do_patch on musl. Upstream fixed PT_NIP handling for non-glibc in
122d6e7885 and 17ff2e676b, and elf_mem_image.cc no longer uses
__WORDSIZE, so drop it and the elf_mem_image patch.

Replace the Makefile.am patch that stopped building the test programs
with the --disable-tests configure option added upstream.

AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-12 20:54:59 -08:00
Khem Raj 5b6e144ad3 hunspell-dictionaries: Fix LICENSE for SPDX
The per-dictionary licenses were set as LICENSE:dictionaries/<lang>
overrides, which never apply since they are not package names, so the
recipe, which installs every dictionary into a single package, was
reported as MIT only. Several of those values were also deprecated SPDX
ids (GPL-2.0, LGPL-2.1, ...) or license refs without a license text
(LicenseRef-BSD, LicenseRef-Other).

Record each dictionary's license in HUNSPELL_DICT_LICENSE, taken from the
"license" field of its upstream package.json with deprecated ids mapped
to their -only equivalents, and set LICENSE to the conjunction of all of
them. Exceptions:

- en-*: "BSD" is not an SPDX id; these use the SCOWL license text, added
  as LicenseRef-SCOWL.
- ru: a BSD-style license with an extra clause, added as
  LicenseRef-hunspell-ru.
- vi: package.json says GPL-2.0, but the license file says GPLv3.
- is: the license file also covers the CC-BY-4.0 hyphenation rules.

AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-12 20:54:58 -08:00
Khem Raj 4e207c2221 tcmu-runner: Use an SPDX identifier for the LGPL license
LGPLv2.1 is a legacy name that is only accepted through SPDXLICENSEMAP,
which maps it to LGPL-2.1-only. The sources are licensed under "the GNU
Lesser General Public License, version 2.1 or any later version", so use
LGPL-2.1-or-later.

AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-12 20:54:58 -08:00
John Keeping e1b33084dd networkmanager: respect WIRELESS_DAEMON
Use the standard WIRELESS_DAEMON variable in the same way as recipes in
oe-core so that networkmanager will automatically use iwd or
wpa-supplicant depending on which is selected globally.

This avoids installing two different wireless daemons as rdepends of
networkmanager and packagegroup-base-wifi.

Signed-off-by: John Keeping <jkeeping@inmusicbrands.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-12 20:54:58 -08:00
Leon Anavi 6f6f17f892 meta-webserver: README.md: Improve send-email
Add -M30% -C --find-copies-harder to the git send-email example in
README.md so that git format-patch detects renames and copies more
aggressively.

Patches that move or copy files then show only the changed lines
instead of full file deletions and additions, which makes them
smaller and easier to review.

Suggested-by: Khem Raj <khem.raj@oss.qualcomm.com>
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-12 20:54:57 -08:00
Leon Anavi cf37cde8bf netdata: Upgrade 2.10.4 -> 2.12.3
Upgrade to release 2.12.3:

- Fixed the MQTT keepalive of the Cloud connection. It was only
  checked when the connection was idle, so a link with steady
  inbound traffic never noticed an unanswered ping and could stay
  stalled indefinitely. The ping and acknowledgement deadlines also
  followed the wall clock, so a clock step caused a false ping
  timeout or delayed detection, and on boards without an RTC
  acknowledgements never timed out before the first NTP sync.
  Deadlines now use a monotonic clock, and a dead connection is
  detected 60 seconds after an unanswered ping.
- The Agent's HTTPS client for Netdata Cloud now checks the chunk
  sizes of chunked responses strictly and caps such responses at 1
  MiB. A malformed or very large chunk size could make the Agent
  exit while allocating memory for it.
- Fixed use-after-free crashes when netdatacli remove-stale-node or
  the orphan and ephemeral host cleanup removed a host that was
  still in use, either by a child reconnecting to it or by a plugin
  that had it selected as a virtual node. A child that reconnects
  during a removal is now asked to retry, and a virtual node
  selected by a plugin is reported as online and left alone.
- Removed the [stream] parent using h2o option. The h2o web server
  was removed in v2.7.0, and since v2.8.0 a child with this option
  enabled crashed on every connection attempt to its Parent. A
  stream.conf that still sets it is accepted and the option is
  ignored.
- Access lists: a client whose IP matches a negated entry, such as
  !203.0.113.7 in allow connections from = !203.0.113.7 *, is now
  denied without its hostname being checked against the list. This
  applies to every access list in netdata.conf when DNS checks are
  enabled, including the default heuristic mode for lists with a
  wildcard.
- URLs with malformed percent escapes are now rejected with HTTP
  400. A % had to be followed by two hex digits but was not
  checked, and a URL that failed to decode was served using the
  part decoded so far, so /api/v1/info%zz was answered as
  /api/v1/info. A request containing a literal % that is not
  followed by two hex digits, such as ?x=100%, now gets 400.
- The MCP API key and the management API key are now compared in
  constant time, so response timing no longer reveals how close a
  guessed key is.
- MCP: JSON-RPC batches are limited to 64 requests and 16 MiB of
  responses, and WebSocket messages to 1 MiB, the same as HTTP
  requests. Requests whose id is not a string, number or null are
  rejected.
- X-Forwarded-For: the Agent now keeps only the first address of
  the header, and only when it is a valid IPv4 or IPv6 address.
  This is the forwarded client address shown in the access log and
  in the audit entries of dynamic configuration changes. Other
  values, such as unknown, are dropped.
- Registry: the netdata_registry_id identity is now read only from
  the Cookie header, not from anywhere else in the request, such as
  the query string. This affects only Agents with the registry
  enabled, which is off by default.
- Claiming: a request to /api/v2/claim or /api/v3/claim with a
  wrong key no longer regenerates the claim challenge, so it cannot
  interrupt a claim an administrator is making. The challenge is
  still regenerated at startup and after a claim with a valid key.
- Fixed SQLite stalls across the Agent. A global lock was held
  around SQLite calls, so one slow statement blocked every thread
  using SQLite, not only those using the same database connection.
- Corruption of the metadata database that appears while the Agent
  is running is now marked for recovery on the first failing query,
  instead of only at a clean shutdown or never after a crash. The
  SQLite query statistics no longer count a busy retry that later
  succeeded as a failed query.
- Parents using the ram or alloc storage modes no longer shift
  their children's streamed and replicated history after a gap.
  Every gap moved all older values one interval earlier and
  overstated retention by one interval.
- dbengine now loads only datafiles with the exact name it writes.
  A copy such as datafile-1-0000000001.ndf.bak was loaded a second
  time alongside the real file, and a stray datafile-2-*.ndf
  stopped the Agent at startup. Other names are now reported as
  unknown files and skipped.
- Fixed crashes when the cleanup of obsolete charts freed a chart,
  or its labels, while health variable lookups, Prometheus export,
  alert and context API requests or queries were still reading it.
  These include the Agent exiting on an allocation of a huge size.
- dbengine: the Agent no longer hangs at startup when the directory
  of a tier cannot be created or its initialization thread cannot
  start. A missing tier above tier 0 now leaves the Agent running
  with the tiers below it, and a missing tier 0 stops startup with
  an error.
- Fixed a crash in metric correlations and other weights queries
  over two or more nodes on Agents without a dbengine tier, such as
  a Parent using the ram or alloc storage modes. Such Agents now
  process the nodes one at a time.
- The summary.nodes[] section of query responses now includes the
  query time of the last node, which was missing. With
  options=percentage, the anomaly rate of the dimensions view is no
  longer inflated. The chart_labels arrays of /api/v1/data now have
  one entry per dimension, with null where a chart lacks the label.
- [ml] dimension anomaly score threshold is now limited to 0.01 to
  1.00, with a warning in the log when the configured value is
  changed. Values up to 5.00 were accepted, but anything above 1.00
  silently turned off anomaly detection, because a model's anomaly
  score cannot exceed 100. Such values now run at 1.00, the least
  sensitive setting.
- ebpf.plugin and ebpf-go.plugin are installed setuid root. When
  they run with elevated privileges, they now ignore the
  NETDATA_*_DIR environment variables and use the plugin,
  configuration and log directories they were built with. Standard
  installations are not affected. A [directories] override in
  netdata.conf that points these directories elsewhere no longer
  reaches the eBPF plugins, which log one line for each ignored
  variable.
- Redfish: manager network ports exposed as standard Port resources
  are now collected, including their link state and speed. They
  were rejected, leaving the collection permanently partial.
- PAN-OS: panos.ipsec.tunnels now counts the established IPsec
  tunnels instead of reporting the configured ones, and a tunnel
  with overlapping SAs during rekeying counts once. The remaining
  SA lifetime now reports the longest valid lifetime of a tunnel
  instead of a varying or summed value.
- go.d.plugin: fixed collectors such as Cato Networks failing a
  collection cycle with a host scope conflict when a host's
  metadata changed while its identity stayed the same.
- Cato Networks: the topology Function now connects each site to
  its devices, keeps every observed WAN tunnel instead of merging
  parallel ones, and marks tunnels as connected, disconnected or
  unknown. Sites, devices and tunnels carry more detail for
  troubleshooting, such as HA roles, loss, jitter, last-mile
  measurements and BGP sessions, and the graph notes when
  inventory, metrics or BGP data are missing. The collector now
  uses Cato SDK v1.1.0.
- ebpf.plugin: the number of tracked PIDs in ebpf.monitoring_pid no
  longer keeps growing on hosts with short-lived processes. A
  process that exited before its /proc entry was read was released
  without being subtracted.
- statsd.plugin: with [statsd] set charts as obsolete after enabled
  (off by default), the Agent no longer crashes the first time an
  idle metric is removed. Removal also no longer leaks the metric's
  values, and metrics used by synthetic charts are kept. The
  private chart count no longer wraps around and blocks every new
  private chart.
- Virtual nodes: the inactivity timeout set by a collector, such as
  the one SNMP devices use, works again. It was discarded when the
  node was defined, so a virtual node never went offline after its
  collector stopped reporting it. A virtual node taken over again
  by its local collector after a streamed copy of it stops now has
  its health checks and normal operation restored.
- SNMP: a poll in which the device answered no request now fails.
  Profile statistics built from cached metadata were still reported
  for the device's virtual node, keeping it active after its
  measurements had stopped.
- PowerStore: performance, Ethernet and capacity charts now show
  the values the array reports. The collector read the field names
  of raw samples, while the five-minute and daily rollups it
  requests use different names, so these charts showed zeros or
  were missing. CPU now shows the peak utilization of the interval
  as a percentage, and average login counts keep their fractions.
- log2journal: JSON lines that end inside a backslash escape are
  now rejected instead of being parsed with bytes from beyond the
  end of the line.
- log2journal: a named group of a PCRE2 pattern or rewrite rule
  that does not take part in a match, such as an optional group, no
  longer makes the parser read one byte before its buffer. Output
  does not change.
- log2journal: fixed several JSON parsing and output issues. Very
  long numbers with an exponent could overflow the number buffer or
  crash the process, \u000a and \u0009 escapes dropped the rest of
  the value, unpaired surrogates produced invalid UTF-8, and a line
  that failed to parse left its fields to the next line in both
  JSON and logfmt mode. An --inject now replaces a value read from
  the log instead of being appended to it, and a rewrite that
  refers to its own key reads the original value.
- go.d.plugin: fixed two shutdown races in the job manager. A
  shutdown or failed restart could wait until its deadline instead
  of finishing, and a Function request that had already been
  accepted could be reported as rejected because the plugin was
  stopping.
- go.d.plugin service discovery: discovered names and addresses are
  now encoded as data in the jobs that discovery rules generate.
  They were inserted into the YAML as text, so an IPv6 address
  could make a job fail to parse and a name such as on became a
  boolean. Stock rules use a new job template helper, for example
  {{ job "name" .Name "url" .Address }}, which custom rules can use
  too. Existing rules and saved dynamic configurations keep
  working.
- go.d.plugin: collector logs and errors, including those returned
  by dynamic configuration checks, no longer include raw content
  from the files a collector reads, such as log samples,
  configuration lines or certificates. They name the file, line,
  field and reason instead, so some messages are less detailed.
- go.d.plugin and ibm.d.plugin: HTTP responses read by collectors,
  including Prometheus and OpenMetrics endpoints, are now limited
  to 64 MiB, measured after gzip decompression. A larger response
  fails the collection instead of growing memory without bound.
  HTTPCheck reports such a response as bad_content; use a smaller
  endpoint for health checks.
- SNMP traps and S3: the state files these collectors keep are now
  read and written safely. Symlinks and special files are rejected,
  and a temporary file left by a crash no longer blocks later
  writes.
- Fixed stock alert and metadata issues: the Portcheck
  portcheck_connection_fails alert no longer looks up a dimension
  that does not exist, the Elasticsearch, OpenSearch and Unbound
  metadata now match the charts they describe, and the Unbound and
  ethtool module charts are titled "Module ..." again instead of
  "CollectorV1 ...".
- The progress Function now shows API calls that failed with a
  server error as errors. They were styled with a severity the
  dashboard does not recognize and looked like successful calls.
- Host labels are now read from the configuration file the Agent
  loaded, including one given with -c, at startup and on netdatacli
  reload-labels. Labels removed from that file are also removed on
  reload.
- Crash reports now include a stack trace for SIGABRT raised
  outside the Agent's own fatal error handling.
- On macOS and Linux builds without libbacktrace, the Agent again
  saves its status file when it crashes, so the next start reports
  the exit reason and signal.
- Fixed a use-after-free at shutdown on Parents with archived
  children, when loading their contexts outlasted the shutdown
  wait.
- Fixed rate-limited log messages being emitted more often than
  their limit when several threads logged through the same limiter
  at once.
- When [db] update every is above 3600, the warning now reports the
  value it was clamped to (3600) instead of 1. The clamp itself was
  already correct.
- When a collector tries to add a dimension without an id, the
  fatal error now says so, instead of blaming the destruction of
  the chart's dimension index.
- The installer and updater now treat curl exit status 56, which
  some curl versions return on protocol errors, as a download
  failure, like exit statuses 22 and 78.
- Windows packages now include updated MSYS2 packages on top of the
  bundled MSYS2 base, including OpenSSL 3.6.5, curl 8.23.0 and
  msys2-runtime 3.6.11. Each update is pinned by URL and checksum,
  and the bundled package database matches the files that ship.
- When building from source needs a Go toolchain and none is
  installed, the installer now downloads Go 1.27.3 instead of
  1.27.0. Go 1.27.0 and later remain supported.

Refresh 0002-Do-not-hardcode-systemd-unit-directories.patch for
netdata v2.12.3 because the upstream now routes all systemd unit
installs through NETDATA_SYSTEMD_UNIT_DEST, so override that
variable instead of each DESTINATION.

Add 0005-build-allow-using-a-local-SQLite-source-tree.patch which
is the SQLite part of upstream commit 09e668b build:
restructure the CMake build system. The full commit does not apply
to 2.12.x. It allows SQLite offline builds.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-12 20:54:57 -08:00
Ankur Tyagi 147cbbb474 tinyproxy: patch CVE-2026-125371
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-125371

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-12 20:54:57 -08:00
Ankur Tyagi 634bd4bef3 brotli: set CVE_PRODUCT to "google:brotli"
cve-check class is setting default CVE_PRODUCT to 'brotli' which ignores
the CVEs from NVD Database.

Reference:
CVE-2026-111497
https://nvd.nist.gov/vuln/detail/cve-2026-111497

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-12 20:54:56 -08:00
Ankur Tyagi 0ab3994b4d cockpit: mark CVE-2024-2947 fixed
Commit[1] also identified by Debian[2]

Details:
https://nvd.nist.gov/vuln/detail/cve-2024-2947

[1]https://github.com/cockpit-project/cockpit/commit/9c4cc9b6df632082538b53bdc8ee9ec1c5cad4da
[2]https://security-tracker.debian.org/tracker/CVE-2024-2947

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-12 20:54:56 -08:00
Ankur Tyagi 24746d65e9 apitrace: patch CVE-2026-126050
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-126050

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-12 20:54:56 -08:00
Ankur Tyagi df6904ee8d 7zip: upgrade 26.05 -> 26.06
Changelog:
https://github.com/ip7z/7zip/releases/tag/26.06

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-12 20:54:55 -08:00
Khem Raj bbed2a52a3 apitrace: Do not export _init and _fini from wrappers
The wrapper version scripts name _init and _fini, which riscv64 glibc does
not define, so linking egltrace.so with lld fails:

  ld.lld: error: version script assignment of 'global' to symbol '_init' failed: symbol not defined

Drop them from the version scripts; the loader uses DT_INIT/DT_FINI and
nothing looks them up by name.

AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-12 20:54:55 -08:00
Khem Raj 8cd32180e0 fastfetch: Fix build with lld
Since the link type was switched to dynamic, fastfetch adds
-Wl,--copy-dt-needed-entries to the exe linker flags. LLD does not
support it, so every CMake check that links fails; utmpx.h is then
reported missing and the utmp.h fallback breaks the build:

error: use of undeclared identifier 'endutxent'; did you mean 'endutent'?

Only add the flag when the linker accepts it, map endutxent in the
utmp.h fallback as well, and link libxcb and libX11 explicitly since
LLD cannot pick them up through xcb-randr/xrandr DT_NEEDED entries.

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
AI-Generated: Uses Claude Code
2026-11-12 20:54:55 -08:00
Tafil Avdyli 513238ff10 fastfetch: set link type to dynamic
The default option is dlopen. Switch to dynamic to allow Yocto's
shlibdeps to generate runtime dependencies automatically to avoid
missing libraries in the target image.

Signed-off-by: Tafil Avdyli <tafil@tafhub.de>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-12 20:54:54 -08:00
Khem Raj 417dd65dd2 webmin: Remove unused patches
These were dropped from SRC_URI in eb4d6ede5d (webmin: upgrade 2.641 -> 2.653) but the files were left behind:

  init-exclude.patch

AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-12 20:54:54 -08:00
Khem Raj 7351592ea9 nmap: Remove unused patches
These were dropped from SRC_URI in 13bafd2753 (nmap: upgrade 7.92 -> 7.99) but the files were left behind:

  0003-Fix-off-by-one-overflow-in-the-IP-protocol-table.patch
  nmap-redefine-the-python-library-dir.patch

AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-12 20:54:54 -08:00
Khem Raj a751dc5e2d sysdig: Remove unused patches
These were dropped from SRC_URI in 0fa0257275 (sysdig: upgrade 0.28.0 -> 0.39.0) but the files were left behind:

  0001-update-cmake-Only-add-dependencies-when-we-bundle.patch

AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-12 20:54:54 -08:00
Khem Raj 8c6a5666be glade: Remove unused patches
These were dropped from SRC_URI in caf1d45b40 (glade: upgrade 3.36.0 -> 3.40.0) but the files were left behind:

  CVE-2020-36774.patch
  remove-yelp-help-rules-var.patch

AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-12 20:54:53 -08:00
Khem Raj 03621139c6 postfix: Remove unused patches
These were dropped from SRC_URI in ad0f53d2bb (postfix: upgrade 3.10.9 -> 3.11.2) but the files were left behind:

  0001-makedefs-Account-for-linux-7.x-version.patch

AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-12 20:54:53 -08:00
Khem Raj 353fc804ac nbdkit: Remove stale 1.33.11 recipe
nbdkit_1.33.11.bb and its patch were left behind next to the current
recipe and are never selected since the newer version is preferred.

AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-12 20:54:53 -08:00
Khem Raj 3ea39382fb cloudflared: upgrade 2026.3.0 -> 2026.10.7
Upstream removed the vendor directory (TUN-10829), so fetch the Go
modules through go-mod-update-modules like other Go recipes, with
cloudflared-go-mods.inc and cloudflared-licenses.inc generated by
bitbake -c update_modules. The licenses that could not be detected
automatically were identified by hand.

AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-12 20:54:52 -08:00
Khem Raj 578dbb6654 ndpi, ntopng: upgrade to 6.0 and 7.0
ndpi: upgrade 5.0 -> 6.0
- Drop 0001-configure-Stop-embedding-pwd-at-configure-time.patch,
  NDPI_BASE_DIR is gone upstream.

ntopng: upgrade 6.6 -> 7.0
- Drop 0001-Fix-build-with-OpenSSL-4.0.patch, CVE-2026-84990.patch and
  CVE-2026-86090-CVE-2026-86091.patch, included in this release.
- Refresh the remaining patches.

They are upgraded together as ntopng 7.0 is built against nDPI 6.0.

AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-12 20:54:52 -08:00
Khem Raj 7f61ddde96 drbd-utils: upgrade 9.34.0 -> 9.35.0
Update the drbd-headers submodule revision to the one used by the
v9.35.0 tag and refresh 0001-fix-the-hardcoded-legacy-helper-path.patch.

AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-12 20:54:52 -08:00
Khem Raj 934c4bbed4 tailscale: upgrade 1.104.1 -> 1.104.6
Regenerate tailscale-go-mods.inc and tailscale-licenses.inc with
bitbake -c update_modules.

AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-12 20:54:51 -08:00
Khem Raj e003f7cf19 samba: upgrade 4.23.11 -> 4.25.1
Drop the memset_explicit backports, included in this release, and
refresh 0003-Add-config-option-without-valgrind.patch.

The bundled talloc, tevent and tdb versions are unchanged (2.5.0,
0.17.2, 1.4.15).

AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-12 20:54:51 -08:00
Khem Raj 2cfe7110c2 vsomeip: upgrade 3.7.3 -> 3.8.0
Refresh 0001-Fix-pkgconfig-dir-for-multilib.patch through
0005-Do-not-treat-warnings-as-errors-with-clang.patch; the memory tests
were rewritten and no longer need the scanf fix.

The policy manager unit test now gets its build directory from a CMake
compile definition instead of policy_manager_impl_unit_test_macro.hpp,
so point that at the installed test directory to avoid embedding ${B}.

AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-12 20:54:51 -08:00
Khem Raj 9690bac128 open-vm-tools: upgrade 13.0.10 -> 13.1.0
gtk2 support was removed and gtk4 added, and --with-gtkmm was split
into gtkmm3/gtkmm4; adjust the configure options and use gtk+3 for x11.

AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-12 20:54:50 -08:00
Khem Raj 0e573fde7f kronosnet: upgrade 1.33 -> 1.36
The wireshark dissector is now built by default and needs
wireshark >= 4.6.0; add a wireshark PACKAGECONFIG, off by default.

AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-12 20:54:50 -08:00
Khem Raj 4304b4f489 phodav: upgrade 3.0 -> 3.2
gtk-doc was replaced by gi-docgen, drop the gtk-doc class and disable
the new docs, introspection and litmus options. Set the new sysusers and
udev rules directories, and derive the download directory from PV.

AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-12 20:54:50 -08:00
Khem Raj 608487572c stunnel: upgrade 5.80 -> 5.82
Refresh fix-openssl-no-des.patch.

AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-12 20:54:50 -08:00
Khem Raj 9aaca244d5 autofs: Fix build with musl
lib/misc.c in 5.2.0 uses the GNU strerror_r() but, unlike the rest of
autofs, does not include automount.h, which maps it to
autofs_strerror_r() for non-glibc C libraries. Do the same mapping in
misc.c.

AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-12 20:54:49 -08:00
Khem Raj f140d66e8b autofs: upgrade 5.1.9 -> 5.2.0
Drop 0010-autofs-5.1.9-Fix-incompatible-function-pointer-types.patch,
included in this release, and refresh
0006-Do-not-hardcode-path-for-pkg.m4.patch.

AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-12 20:21:06 -08:00
Khem Raj d981d77205 corosync: upgrade 3.1.10 -> 3.2.0
Drop CVE-2026-35091.patch and CVE-2026-35092.patch, included in this
release.

AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-12 20:21:06 -08:00
Khem Raj 2e875cd253 chrony: upgrade 4.8 -> 4.9
Refresh arm_eabi.patch.

AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-12 20:21:06 -08:00
Khem Raj 3afd99700b ndisc6: upgrade 1.0.8 -> 1.0.9
Refresh 0001-Remove-use-of-variables-indicating-buildtime-informa.patch,
upstream already dropped the build date and host name; only the configure
invocation remains.

AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-12 20:21:06 -08:00
Khem Raj 475311c03a ettercap: upgrade 0.8.4.1 -> 0.8.5.1
Refresh 0001-ec.h-do-not-strip-a-pre-existing-_GNU_SOURCE-define.patch.

AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-12 20:21:05 -08:00
Khem Raj cc18b159f9 tgt: upgrade 1.0.90 -> 1.0.98
Drop musl-__wordsize.patch, __WORDSIZE is no longer used.

AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-11-12 20:21:05 -08:00