Commit Graph

33140 Commits

Author SHA1 Message Date
Peter Marko 74cda1df0e limwmf: upgrade 0.2.8.4 -> 0.2.13
$ git log --oneline | grep CVE
f58c813 merge in fixes for libgd CVE-2019-6978
407a58b CVE-2017-6362
dabcb8c CVE-2016-10168
b691e47 CVE-2016-10167
16919b4 CVE-2016-9317
2208b48 CVE-2016-9011
f47cbdf CVE-2015-4696
b5ae5d1 CVE-2015-4695
879d6bf CVE-2015-0848+CVE-2015-4588
44f37ac CVE-2009-3546
7bd8ce0 CVE-2007-2756
cfc0916 CVE-2007-3477
5ec7547 CVE-2007-3473
fdd21b1 CVE-2007-3472
5588450 CVE-2007-0455
2c84480 CVE-2009-1364, Use-after-free vulnerability
b9cc022 CVE-2006-3376 Integer overflow in player.c

Adaptations:
* removed patches included in new version.
* extended buildpaths fix to pc file
* changed paths from libdir/gtk-2 to libdir/gdk-pixbuf-2.0

Test - built imagemagick (only recipe in meta-openembedded depending
on libwmf) with wmf PACKAGECONFIG.

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-27 09:21:43 -08:00
Peter Marko 1ed73b79de libwmf; switched to unofficial fork
Debian has switched to this fork in Bookworm.
If contains dozens of CVE fixes and other bugfixes.
This should make the maintenance of this package easier.

The sources are identical to those abandoned in 2002:
Only in .../tmp/work/core2-64-poky-linux/libwmf/0.2.8.4/libwmf-0.2.8.4/: autom4te.cache
Only in /tmp/caolanm/libwmf/: .git

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-27 09:21:43 -08:00
Peter Marko 2308c8b5a2 imagemagick: mark CVE-2023-5341 as fixed
This CVE is fixed by
https://github.com/ImageMagick/ImageMagick/commit/aa673b2e4defc7cad5bec16c4fc8324f71e531f1
It is tracked as 'fixed in next version' - 7.1.2 (which does not exist)
in NVD DB.

.../tmp/work/core2-64-poky-linux/imagemagick/7.1.1-43/git$ git describe aa673b2e4defc7cad5bec16c4fc8324f71e531f1 --tags
7.1.1-18-4-gaa673b2e4d
.../tmp/work/core2-64-poky-linux/imagemagick/7.1.1-43/git$ git tag --contains aa673b2e4defc7cad5bec16c4fc8324f71e531f1 | head -n1
7.1.1-19

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-27 09:21:43 -08:00
Peter Marko 7cec219b50 imagemagick: upgrade 7.1.1-26 -> 7.1.1-43
This fixes at least CVE-2024-41817 (in 7.1.1-36).

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-27 09:21:43 -08:00
Peter Marko 4e5fdfc423 imagemagick: refactor so devtool upgrade works
* move version part after dash to PV
* set git tag regex

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-27 09:21:43 -08:00
Peter Marko 3d97f4c13d procmail: patch CVE-2017-16844.
Take patch from Debian.
https://sources.debian.org/data/main/p/procmail/3.22-26%2Bdeb10u1/debian/patches/30

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-27 09:21:43 -08:00
Peter Marko 8378820dab procmail: patch CVE-2014-3618
Take patch from Debian.
https://sources.debian.org/data/main/p/procmail/3.22-20%2Bdeb7u1/debian/patches/CVE-2014-3618.patch

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-27 09:21:43 -08:00
Peter Marko 9fff0040f1 id3lib: mark CVE-2007-4460 as fixed
This is fixed in id3lib3.8.3_3.8.3-16.2.debian.tar.xz patch included in
SRC_URI.
Version 3.8.3-7 contains patch for this CVE, we use 3.8.3-16.2.
This can be verified by checking the debian/changelog within this patch
or diffing [1] and [2] and verifying that this can be reverse-applied.

[1] https://snapshot.debian.org/archive/debian/20070819T000000Z/pool/main/i/id3lib3.8.3/id3lib3.8.3_3.8.3-6.diff.gz
[2] https://snapshot.debian.org/archive/debian/20070819T000000Z/pool/main/i/id3lib3.8.3/id3lib3.8.3_3.8.3-7.diff.gz

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-27 09:21:42 -08:00
Peter Marko e44f3251b5 spice: set CVE-2016-2150 status to fixed
Debian has fixed this CVE with [1].
That patch is taken from [2].

.../tmp/work/core2-64-poky-linux/spice/0.15.2/git$ git describe 69628ea13
v0.13.1-190-g69628ea1
.../tmp/work/core2-64-poky-linux/spice/0.15.2/git$ git tag --contains 69628ea13
v0.13.2

[1] https://sources.debian.org/patches/spice/0.12.5-1%2Bdeb8u5/CVE-2016-2150/0002-improve-primary-surface-parameter-checks.patch/
[2] https://gitlab.freedesktop.org/spice/spice/-/commit/69628ea1375282cb7ca5b4dc4410e7aa67e0fc02

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-27 09:21:42 -08:00
Peter Marko 9f7c1e6bd1 uw-imap: patch CVE-2018-19518
Take patch from Debian from
https://salsa.debian.org/lts-team/packages/uw-imap/-/commit/873b07f46ce40f43bca10ec85fe63a7a0b934294

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-27 09:21:42 -08:00
Yi Zhao 30580f909a strongswan: upgrade 5.9.14 -> 6.0.0
ChangeLog:
https://github.com/strongswan/strongswan/releases/tag/6.0.0

The aes, curve25519, des, fips-prf, gmp, hmac, md5, pkcs12, rc2, sha1,
sha2 plugins are not enabled by default[1]. Remove these plugins from
RDEPENDS and add PACKAGECONFIG for them.

[1] https://github.com/strongswan/strongswan/blob/6.0.0/NEWS#L38

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-26 11:12:37 -08:00
Yi Zhao a3c4d70afb networkmanager: upgrade 1.48.10 -> 1.50.0
ChangeLog:
https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/blob/1.50.0/NEWS

Drop 0001-libnm-systemd-core-Disable-sd_dhcp6_client_set_duid_.patch as
it has been merged upstream.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-26 11:12:37 -08:00
Yi Zhao 44c18d1fb6 frr: upgrade 10.1.1 -> 10.2
ChangeLog:
https://github.com/FRRouting/frr/releases/tag/frr-10.2

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-26 11:12:37 -08:00
Hongxu Jia 2a4de5168a python3-beautifulsoup4,python3-soupsieve: fix loop dependency error
While recipe build depends on python3-beautifulsoup4-native and
python3-soupsieve-native, it failed at fix loop dependency error
...
|ERROR: Task virtual:native:meta-openembedded/meta-python/
recipes-devtools/python/python3-soupsieve_2.6.bb:do_populate_sysroot
has circular dependency on virtual:native:meta-openembedded/
meta-python/recipes-devtools/python/python3-beautifulsoup4_4.12.3.bb:do_populate_sysroot
...

Correct runtime depends as class-target override to workaround

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-26 11:12:37 -08:00
Peter Marko db283053d0 synergy: patch CVE-2020-15117
Pick commit based on [1].

Note that the pick is node from deskflow, which is open-source successor
of synergy.
If anyone uses thie recipe, it should be switched.

[1] https://github.com/deskflow/deskflow/security/advisories/GHSA-chfm-333q-gfpp

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-24 08:23:09 -08:00
Peter Marko 95b8d055db opusfile: patch CVE-2022-47021
This patch is mentioned in [1] and [2].

[1] https://nvd.nist.gov/vuln/detail/CVE-2022-47021
[2] https://github.com/xiph/opusfile/issues/36

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-24 08:23:09 -08:00
Peter Marko c048c04101 libconfuse: patch CVE-2022-40320
Pick patch per [1] poiting to [2] pointing to [3].

[1] https://nvd.nist.gov/vuln/detail/CVE-2022-40320
[2] https://github.com/libconfuse/libconfuse/issues/163
[3] https://github.com/libconfuse/libconfuse/commit/d73777c2c3566fb2647727bb56d9a2295b81669b

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-24 08:23:09 -08:00
Peter Marko 9ff3f634f9 rtmpdump: add +git to PV
We fetch newer hash than 2.4 version.

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-24 08:23:09 -08:00
Peter Marko d7758a8d0c rtmpdump: mark CVE-2015-8270, CVE-2015-8271 and CVE-2015-8272 as fixed
This CVE is marked as fixed by Debian.
Extracting Debian jessie Debian sources [1] shows 4 commits uses for
backports. All these commits are already included in current hash
([2]-[5]).

../tmp/work/core2-64-poky-linux/rtmpdump/2.4/git$ git log | grep 'commit \(10b580aabcec1621b25518271ba1ab2b018be88e\|...\|4312322107a94c81d3ec5b98f91bc6b923551dc5\)'
commit 530f9bb2a02a78c1198fb2bf0293a12d225e4691
commit 4312322107a94c81d3ec5b98f91bc6b923551dc5
commit 39ec7eda489717d503bc4cbfaa591c93205695b6
commit 10b580aabcec1621b25518271ba1ab2b018be88e

[1] https://snapshot.debian.org/archive/debian/20170704T094954Z/pool/main/r/rtmpdump/rtmpdump_2.4%2B20150115.gita107cef-1%2Bdeb8u1.debian.tar.xz
[2] https://git.ffmpeg.org/gitweb/rtmpdump.git/commitdiff/10b580aabcec1621b25518271ba1ab2b018be88e
[3] https://git.ffmpeg.org/gitweb/rtmpdump.git/commitdiff/39ec7eda489717d503bc4cbfaa591c93205695b6
[4] https://git.ffmpeg.org/gitweb/rtmpdump.git/commitdiff/530f9bb2a02a78c1198fb2bf0293a12d225e4691
[5] https://git.ffmpeg.org/gitweb/rtmpdump.git/commitdiff/4312322107a94c81d3ec5b98f91bc6b923551dc5

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-24 08:23:09 -08:00
Peter Marko 59d3949e3e apache2: ignore CVE-1999-1237
This vulnerability is for Apache-AuthenSmb module.
Fixed in 0.9, current version is 0.72.
In any case, not part of Apache2 sources.

[1] points to [2], which is archived under [3]

[1] https://nvd.nist.gov/vuln/detail/CVE-1999-1237
[2] http://www.securityfocus.com/archive/1/14384
[3] https://web.archive.org/web/20020618143426/http://online.securityfocus.com/archive/1/14384

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-24 08:23:09 -08:00
Wang Mingyu 6b96d4062d uftrace: upgrade 0.16 -> 0.17
Changelog:
===========
* New features
  Support watchpoint for global variables
  Show man pages for the given command
  Add utc_offset in the header info

* Bug fixes
  Show arguments in libraries from dlopen
  Save debug info for libraries from dlopen
  Protect FD of communication channel from being closed

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-24 08:23:09 -08:00
Wang Mingyu 20e3072d96 tk: upgrade 9.0.0 -> 9.0.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-24 08:23:09 -08:00
Wang Mingyu 960cbaa3fb thingsboard-gateway: upgrade 3.5.1 -> 3.5.3.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-24 08:23:09 -08:00
Wang Mingyu e7d4cb2406 sip: upgrade 6.9.0 -> 6.9.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-24 08:23:09 -08:00
Wang Mingyu c97a5f476d python3-wtforms: upgrade 3.1.2 -> 3.2.1
Changelog:
=========
- Translations update: korean, chinese (traditional), portugese, russian,
  dutch, kazakh, swedish, turkish, slovak, ukranian, spanish, french.
- Move the repository to the pallets-eco organization.
- Stop supporting Python 3.9 and start supporting Python 3.13
- Removed required flag support from HiddenWidget,RangeWidget and SelectWidget to
  conform to W3C
- NoneOf and AnyOf can validate multiple valued fields like SelectMultipleField
- Use GHA and pre-commit workflows inspired from Flask.
- Fix SelectMultipleBase import.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-24 08:23:09 -08:00
Wang Mingyu 4a3115df63 python3-web3: upgrade 7.3.0 -> 7.6.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-24 08:23:09 -08:00
Wang Mingyu c8ac729432 python3-virtualenv: upgrade 20.26.6 -> 20.28.0
Changelog:
==========
- fix: Update run_with_catch log flushing
- feat: Write CACHEDIR.TAG file
- Upgrade setuptools to 75.3
- Upgrade setuptools to 75.5 and wheel to 0.45
- No longer forcibly echo off during windows batch activation
- feat: Write CACHEDIR.TAG file
- Upgrade to pip 24.3
- docs: fix the documentation typo on Extend Functionality page.
- Fix broken Windows zipapp and drop 3.7 support
- Skip $PATH entries we cannot check rather than dying with PermissionError

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-24 08:23:09 -08:00
Wang Mingyu 97651819b0 python3-types-setuptools: upgrade 73.0.0.20240822 -> 75.5.0.20241120
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-24 08:23:09 -08:00
Wang Mingyu c901d9c44f python3-typer: upgrade 0.14.0 -> 0.15.1
Changelog:
 https://typer.tiangolo.com/release-notes/#docs

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-24 08:23:09 -08:00
Wang Mingyu d9112efa84 python3-starlette: upgrade 0.39.2 -> 0.42.0
Changelog:
============
- Add max_part_size to MultiPartParser to limit the size of parts in multipart/form-data requests
- Allow to raise HTTPException before websocket.accept()
- Bump minimum python-multipart version to 0.0.13
- Change python-multipart import to python_multipart
- Revert bump on python-multipart on starlette[full] extras
- Raise ClientDisconnect on StreamingResponse
- Use ETag from headers when parsing If-Range in FileResponse
- Follow directory symlinks in StaticFiles when follow_symlinks=True
- Bump minimum python-multipart version to 0.0.18
- Bump minimum httpx version to 0.27.0
- Exclude the query parameters from the scope[raw_path] on the TestClient
- Replace dict by Mapping on HTTPException.headers
- Correct middleware argument passing and improve factory pattern

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-24 08:23:09 -08:00
Wang Mingyu 752053c9fd python3-sqlparse: upgrade 0.5.2 -> 0.5.3
Changelog:
- introduces a more generalized handling of potential denial of service attack
  (DOS) due to recursion errors for deeply nested statements.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-24 08:23:09 -08:00
Wang Mingyu 45144b0004 python3-schedule: upgrade 1.2.1 -> 1.2.2
Changelog:
===========
- Fix bugs in cross-timezone scheduling
- Add support for python 3.12
- Remove dependency on old mock

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-24 08:23:09 -08:00
Wang Mingyu 6302f1245b python3-robotframework: upgrade 7.1 -> 7.1.1
Changelog:
  python3-robotframework

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-24 08:23:09 -08:00
Wang Mingyu 5fd692d25d python3-redis: upgrade 5.1.1 -> 5.2.1
Changelog:
===========
- Extend AggregateRequest with scorer argument (#3409)
- Pin pytest-profiling version due to the bug
- Fixed unsecured tempfile.mktemp() command usage (#3446)
- Fixed bug with SLOWLOG GET response parsing on Redis Software (#3441)
- Fixed issue with invoking _close() on closed event loop (#3438)
- Migrate test infrastructure to new custom docker images (#3415)
- Fixed flacky test with HEXPIREAT command

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-24 08:23:09 -08:00
Wang Mingyu 0cc5ecb073 python3-python-multipart: upgrade 0.0.12 -> 0.0.20
Changelog:
=========
- Handle messages containing only end boundary #142.
- Don't warn when CRLF is found after last boundary on MultipartParser #193.
- Hard break if found data after last boundary on MultipartParser #189.
- Handle PermissionError in fallback code for old import name #182.
- Add dunder attributes to multipart package #177.
- Replace FutureWarning to PendingDeprecationWarning #174.
- Add missing files to SDist #171.
- Fix import scheme for multipart module (#168).
- Rename import to python_multipart

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-24 08:23:09 -08:00
Wang Mingyu 225ff1ec3e python3-pytest-freezer: upgrade 0.4.8 -> 0.4.9
Changelog:
==========
- 3.6 and 3.7 eol
- fix: pytest-freezer actually depends on freezegun>=1.1
- move landing page to markdown

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-24 08:23:09 -08:00
Wang Mingyu c9cbf2a1e2 python3-pytest-cov: upgrade 5.0.0 -> 6.0.0
Changelog:
=============
- Updated various documentation inaccuracies, especially on subprocess handling.
- Changed fail under checks to use the precision set in the coverage configuration.
- Added a --cov-precision cli option that can override the value set in your coverage configuration.
- Dropped support for now EOL Python 3.8.Updated various documentation inaccuracies, especially on subprocess handling.
- Changed fail under checks to use the precision set in the coverage configuration.
- Added a --cov-precision cli option that can override the value set in your coverage configuration.
- Dropped support for now EOL Python 3.8.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-24 08:23:09 -08:00
Wang Mingyu e3b929e3c9 python3-pytest-benchmark: upgrade 4.0.0 -> 5.1.0
License-Update: Copyright year updated to 2023.

Changelog:
==========
- Fixed broken hooks handling on pytest 8.1 or later
- Fixed bad fixture check that broke down then nbmake was enabled.
- Dropped support for now EOL Python 3.8. Also moved tests suite to only test the latest pytest versions (8.3.x).
- Fix generate parametrize tests benchmark csv report errors
- Added the --benchmark-time-unit cli option for overriding the measurement unit used for display.
- Fixes spelling in some help texts.
- Added new cprofile options:
  --benchmark-cprofile-loops=LOOPS - previously profiling only ran the function once, this allow customization.
  --benchmark-cprofile-top=COUNT - allows showing more rows.
  --benchmark-cprofile-dump=[FILENAME-PREFIX] - allows saving to a file (that you can load in snakeviz, RunSnakeRun or other tools).
- Removed hidden dependency on py.path (replaced with pathlib).

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-24 08:23:09 -08:00
Wang Mingyu 9730d31451 python3-pyroute2: upgrade 0.7.12 -> 0.8.1
Changelog:
============
- ndb: fix route replace
- ndb: fix af_bridge_fdb indexes
- rtnl: probe API
- tc: htb rate64
- ipvs: basic support
- decoder: support pcap format
- ethtool: get/set channels

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-24 08:23:09 -08:00
Wang Mingyu a6173e71d3 python3-pyproject-api: upgrade 1.7.2 -> 1.8.0
Changelog:
 really drop python<3 support

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-24 08:23:09 -08:00
Wang Mingyu 6af40e2a3a python3-pymodbus: upgrade 3.7.4 -> 3.8.2
Changelog:
==========
- new framer concept (utility class instead of direct)
- new much simpler transactionManager
- trace methods to trace/modify incoming/outgoing byte streams as well as PDUs
- Convert endianness
- Fix sync serial client, loop.
- Correct future.
- Correct #2501
- Raise exception on no response in async client.
- re-instatiate Future on reconnect
- Remove all trailing zeroes during string decoding
- Fix too many sync client log messages.
- Asyncio future removed from sync client.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-24 08:23:09 -08:00
Wang Mingyu f13baf5379 python3-pymisp: upgrade 2.5.0 -> 2.5.4
Changelog:
 https://github.com/MISP/PyMISP/blob/main/CHANGELOG.txt

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-24 08:23:09 -08:00
Wang Mingyu b275a81390 python3-pydantic-core: upgrade 2.27.1 -> 2.27.2
Changelog:
===========
- fix linux PGO wheel build
- Forward default_value calls to the underlying schema for DefinitionRefValidator
- Include JSON Schema input core schema in function schemas
- fix ValueError on year zero

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-24 08:23:09 -08:00
Wang Mingyu 66a5d99f91 python3-pycurl: upgrade 7.45.3 -> 7.45.4
Changelog:
===========
* Add support for CURLOPT_HAPROXY_CLIENT_IP
* Port tests from bottle to flask
* Add constant for CURL_HTTP_VERSION_3ONLY
* Add EFFECTIVE_METHOD info option
* Don't use `-flat_namespace` on macOS
* Add some missing GIL checks to callback functions
* Fix assorted bugs in pycurl tests, including a segfault
* Fix minor bug in examples/multi-socket_action-select.py
* Build all wheels using the latest version of libcurl and its
  dependencies
* Implement Certificate Authority path autodetection when building
  Linux wheels

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-24 08:23:09 -08:00
Wang Mingyu 64a5447864 python3-pdm: upgrade 2.22.0 -> 2.22.1
Changelog:
===========
- Fix zsh hanging issue by removing PyPI package completion.
- Write dev dependencies to dependency-groups section when importing project
  from other package managers.
- Show a warning when resolving against cross-platform targets under uv mode.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-24 08:23:08 -08:00
Wang Mingyu 85129ca33e python3-pdm-backend: upgrade 2.4.2 -> 2.4.3
Changelog:
==========
- Bump validate-pyproject to 0.9.0
- Update dependencies
- Update badge
- Migrate tool config to pyproject.toml

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-24 08:23:08 -08:00
Wang Mingyu c791c77d12 python3-moteus: upgrade 0.3.72 -> 0.3.76
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-24 08:23:08 -08:00
Wang Mingyu 21ca18e05c python3-mlcommons-loadgen: upgrade 5.0.0 -> 5.0.4
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-24 08:23:08 -08:00
Wang Mingyu 3e7973aa38 python3-marshmallow: upgrade 3.23.1 -> 3.23.2
Changelog:
  Improve type hint formatting for Field, Nested, and Function fields to resolve PyCharm warnings

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-24 08:23:08 -08:00
Wang Mingyu e132068d4d python3-janus: upgrade 1.1.0 -> 2.0.0
Changelog:
==========
- Optimize internal implementation for a little speedup
- Make not-full and not-empty notifications faster
- Add .aclose() async method
- Reduce notifications for a minor speedup
- Allow janus.Queue() instantiation without running asyncio event loop
- Remove sync notifiers for a major speedup
- Fix hang in AsyncQueue.join()
- Implement .shutdown(immediate=False) for both sync and async APIs

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-24 08:23:08 -08:00