Commit Graph

33155 Commits

Author SHA1 Message Date
Yi Zhao
9e656e3ac2
postfix: upgrade 3.8.6 -> 3.8.9
ChangeLog:
http://ftp.porcupine.org/mirrors/postfix-release/official/postfix-3.8.9.HISTORY

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-25 04:50:38 -08:00
Yi Zhao
1057187140
inotify-tools: upgrade 3.22.6.0 -> 4.23.9.0
ChangeLog:
https://github.com/inotify-tools/inotify-tools/releases/tag/4.23.8.0
https://github.com/inotify-tools/inotify-tools/releases/tag/4.23.9.0

Drop local patches as they have been merged upstream.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-25 04:50:38 -08:00
Vijay Anusuri
d4caf06e81 postgresql: upgrade 16.5 -> 16.8
License-Update: Update license year to 2025

Includes fix for CVE-2025-1094

Changelog:
https://www.postgresql.org/docs/release/16.8/

Refreshed 0003-configure.ac-bypass-autoconf-2.69-version-check.patch for
16.8

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-24 21:31:38 -08:00
Robert Yang
e19b4c9755 thin-provisioning-tools: 1.0.13 -> 1.0.14
* License-Update: Update links in GPLv3 (http -> https)

* It need depend on pkg-config, udev and clang-native to build

* Move it to dynamic-layers since now it depends on meta-clang.

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-24 21:31:38 -08:00
Robert Yang
e5abf9a3b9 conf/layer.conf: meta-clang -> clang-layer
It should be clang-layer, not meta-clang.

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-24 21:31:38 -08:00
Markus Volk
d4a9fe65a5 xdg-desktop-portal: update 1.18.4 -> 1.20.0
Changes in 1.20.0

Released: 2025-02-19

Enhancements:

    Document how the test suite works.
    Improve the test runner script.

Changes in 1.19.4

Released: 2025-02-15

New Features:

    Introduce the host app registry. This interface allows host system apps (i.e. apps not running under a sandboxing mechanism like Flatpak) register themselves with XDG Desktop Portal. This allows XDG Desktop Portal to use a proper app id, and desktop file, improving the interaction with portal backends.

Enhancements:

    Use a new internal script to simplify running tests.

Bug Fixes:

    Properly escape notification body in the Notification portal.
    Fix various documentation links in the USB portal documentation page.

Changes in 1.19.3

Released: 2025-02-12

Bug Fixes:

    Fix documentation links in the USB portal page.
    Make the Document portal track open files, and release them when shutting down. This should fix some harmless leak reports.
    Fix a memory leak, a crash, and improve robustness against non-existing folders in the Dynamic Launcher portal.
    Fix build with PipeWire 1.3.82

Enhancements:

    Make the host path xattr more useful by removing the trailing end character, and also reporting the xattr of files inside folders added to the document store.
    Remove libportal-based integrated tests. This should remove the cyclic dependency between libportal, and xdg-desktop-portal. All tests are now based on the Python testing framework.

Changes in 1.19.2

Released: 2025-01-20

Bug Fixes:

    Fix permission check for host system apps in the Camera portal.
    Do not expose the Settings portal if there are no backends available.
    Disable sounds-related notification tests if the project is built without wavparse.

Enhancements:

    Start porting the test suite to Python tests. Once finished, this should break the cyclic dependency between xdg-desktop-portal and libportal.
    Install Python-based tests. This is mostly useful for distributions to run tests as part of their packaging process.

Changes in 1.19.1

Released: 2024-12-21

Dependencies:

    XDG Desktop Portal now requires GLib 2.72 or higher.

New Features:

    Introduce the Notification v2 portal. This updated version of the Notification portal supports a plethora of new fields for notifications, such as sounds, categories, purpose, and more.
    Introduce the USB portal. This portal allows apps with relevant permissions to enumerate and acquire access to specific USB devices.
    Introduce a new SchemeSupported method to the OpenURI portal. This new method allows apps to know ahead of time if the host system is able to deal with a particular scheme.

Enhancements:

    Continued the move towards Python-based tests. This should simplify the test setup in the project quite significantly, and also will allow removing the cyclic dependency between libportal and XDG Desktop Portal.
    Introduce umockdev-based tests.
    Improve the icon validator so it can deal with memfd-based icons.
    Clarify behavior of the Settings portal for non-standardized keys.
    In the Global Shortcuts portal, clarify that the result the BindShortcuts of may be a subset of all requested shortcuts.
    Add a documentation page about icon validation requirements.

Bug Fixes:

    Fix memory leaks in the Background, Email, and Global Shortcuts portals.
    Fix a general file descriptor & memory leak.
    Fix a regression in the Settings portal.
    New and updated translations.

Changes in 1.19.0

Released: 2024-10-09

    Completely rework and restructure the documentation website. Documentation is now segmented by target audience (app developers, desktop developers, and contributors). It also documents how the Document portal operates, the FUSE filesystem, and custom file attributes. This is available in the following address: https://flatpak.github.io/xdg-desktop-portal/docs/index.html
    The portals.conf parser is now able to handle fallback backends better, and respects the order of backends in the config file.
    Try to use the xdg-desktop-portal-gtk backend as a last resort backend, if everything else fails.
    Implement getlk and setlk, and honour O_NOFOLLOW, in the Document portal's FUSE filesystem.
    Neutralize the Devices portal. Originally the Devices portal was introduced so that services like PulseAudio or PipeWire could request access to microphones and cameras on the behalf of apps. It was not meant to be used by sandboxed apps directly, which is unusual for a portal. Practically, however, it didn't take off.
    Implement PID/TID mapping for host system apps.
    Add a new "supported_output_file_formats" option to the Print portal. This can be used by apps like browsers to limit the output file formats presented by the Print portal backend. For example, an app can limit file printing to PDF files.
    Add a new "GetHostPaths" method to the Document portal, which allows mapping file descriptors to paths on the host system. This can be used by apps to show more meaningful file paths in the user interface.
    Like the new method above, the Document portal sets the "user.document-portal.host-path" xattr on files, pointing to the the host system file path. The use case is similar to "GetHostPaths".
    Make the Background portal more robust when validating autostart files.
    Clarify behavior of the File Chooser portal in the documentation pages.
    Improve robustness against deleted o_path fds in the Document portal.
    Fix a warning in some systems while trying to load Request D-Bus object properties.
    Fix a physical inode leak in the Document portal.
    Various improvements to the test suite. Python-based tests now run in parallel and are more careful when setting up the mock D-Bus server. Tests also start dbus-monitor if necessary now. FUSE tests of the Document portal have been made more TAP-alike now.
    Memory leak fixes in a variety of portals and services, including the permissions database, the Document portal, the File Transfer portal, the Location portal, the Background portal, tests, and the icon validator. And more. There's a lot of memory leak fixes everywhere, really.
    Major refactorings of the icon validator. Icons are now limited to 4MB files.
    Update XML specification specifying session handle type to match current actual ABI in GlobalShortcuts, Inhibit, RemoteDesktop, and ScreenCast portals.
    New and updated translations.

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-24 21:31:38 -08:00
Markus Volk
03d9005435 libei: update 1.3.0 -> 1.4.0
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-24 21:31:38 -08:00
Markus Volk
77ed40f75d flatpak: update 1.15.10 -> 1.16.0
Changes in 1.16.1
~~~~~~~~~~~~~~~~~~
Released: not yet

...

Changes in 1.16.0
~~~~~~~~~~~~~~~~~~
Released: 2025-01-09

Bug fixes:

 * Update libglnx to 2024-12-06:
    - Fix an assertion failure if creating a parent directory encounters a
      dangling symlink (GNOME/libglnx#1)
    - Fix a Meson warning

* Don't emit terminal progress indicator escape sequences by default. They are
  interpreted as notifications by some terminal emulators. (#6052)

* Fix introspection annotations in libflatpak

Enhancements:

* Add the `FLATPAK_TTY_PROGRESS` environment variable, which re-enables the
  terminal progress indicator escape sequences added in 1.15.91.

* Document the `FLATPAK_FANCY_OUTPUT` environment variable, which allows
  disabling the fancy formatting when outputting to a terminal.

Changes in 1.15.91
~~~~~~~~~~~~~~~~~~
Released: 2024-12-19

Enhancements:

 * Add the `FLATPAK_DATA_DIR` environment variable, which allows overriding
   at runtime the data directory location that Flatpak uses to search for
   configuration files such as remotes. This is useful for running tests,
   and for when installing using Flatpak in a chroot.

 * Add a `FLATPAK_DOWNLOAD_TMPDIR` variable. This allows using download
   directories other than /var/tmp.

 * Emit progress escape sequence. This can be used by terminal emulators
   to detect and display progress of Flatpak operations on their graphical
   user interfaces.

Bug fixes:

 * Install missing test data. This should fix "as-installed" tests via
   `ginsttest-runner`, used for example in Debian's autopkgtest framework.

 * Unify and improve how the Wayland socket is passed to the sandboxed app.
   This should fix a regression that is triggered by compositors that both
   implement the security-context-v1 protocol, and sets the `WAYLAND_DISPLAY`
   environment variable when launching Flatpak apps. (#5863)

 * Fix the plural form of a translatable string.

Changes in 1.15.12
~~~~~~~~~~~~~~~~~~
Released: 2024-11-28

Bug fixes:

 * Return to using the process ID of the Flatpak app in the cgroup name.
   Using the instance ID in 1.15.11 caused crashes when installing apps,
   extensions or runtimes that use the "extra data" mechanism, which
   does not set up an instance ID. (#6009)

Changes in 1.15.11
~~~~~~~~~~~~~~~~~~
Released: 2024-11-26

Dependencies:

 * In distributions that compile Flatpak to use a separate bubblewrap
   executable, version 0.11.0 is recommended (but not required).
   The minimum bubblewrap continues to be 0.10.0.

 * In distributions that compile Flatpak to use a separate xdg-dbus-proxy
   executable, version 0.1.6 is recommended (but not required).
   The minimum xdg-dbus-proxy continues to be 0.1.0.

Enhancements:

 * Allow applications like WebKit to connect the AT-SPI accessibility tree
   of processes in a sub-sandbox with the tree in the main process (#5898)

     * New sandboxing parameter `flatpak run --a11y-own-name`, which is
       like `--own-name` but for the accessibility bus

     * flatpak-portal API v7: add new sandbox-a11y-own-names option, which
       accepts names matching `${FLATPAK_ID}.*`

     * Apps may call the `org.a11y.atspi.Socket.Embedded` method on names
       matching `${FLATPAK_ID}.Sandboxed.*` by default

 * `flatpak run -vv $app_id` shows all applicable sandboxing parameters
   and their source, including overrides, as debug messages (#5895)

 * Add --device=usb, a subset of --device=all

 * Introduce USB device listing

   * Apps can list which USB devices they want to access ahead of time by
     using the `--usb` parameter. Check the manpages for the more information
     about the accepted syntax.

   * Denying access to USB devices is also possible with the `--no-usb`
     parameter. The syntax is equal to `--usb`.

   * Both options merely store metadata, and aren't used by Flatpak itself.
     This metadata is intended to be used by the (as of now, still in
     progress) USB portal to decide which devices the app can enumerate and
     request access.

 * Add support for KDE search completion

 * Use the instance id of the Flatpak app as part of the cgroup name. This
   better matches the naming conventions for cgroup.

 * Preconfigured repositories can now be set up by OS vendors using
   `${datadir}/flatpak/remotes.d` (typically /usr/share/flatpak/remotes.d),
   in addition to `${sysconfdir}/flatpak/remotes.d` (typically
   /etc/flatpak/remotes.d) which is intended for local sysadmin use

Bug fixes:

 * Update libglnx to 2024-08-23 (#5918)

     * fix build in environments that use -Werror=return-type, such as
       openSUSE Tumbleweed (#5778)

     * add a fallback definition for G_PID_FORMAT with older GLib

     * avoid warnings for g_steal_fd() with newer GLib

     * improve compatibility of g_closefrom() backport with newer GLib

 * Update meson wrap file for bubblewrap to version 0.11.0:

     * drop Autotools build system

     * improve handling of EINTR

     * improve handling of socket control messages

     * improve compatibility with busybox

     * improve compatibility with older Meson

     * fix deprecation warnings

 * Update meson wrap file for xdg-dbus-proxy to version 0.1.6:

     * compatibility with D-Bus implementations that pipeline the
       authentication handshake, such as sd-bus and zbus

     * compatibility with D-Bus implementations that use non-consecutive
       serial numbers, such as godbus and zbus

     * broadcast signals can be allowed without having to add TALK permission
       (#5828)

     * fix memory leaks

 * Fix some memory leaks

 * Translation updates: cs, pl, zh_CN

Internal changes:

 * Better const-correctness (#5913)
 * Fix a shellcheck warning in the tests (#5914)

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-24 21:31:38 -08:00
Yi Zhao
0b83551ff2
audit: remove empty directory
Remove empty directory when enable multilib.

Fixes:
ERROR: audit-4.0.3-r0 do_package: QA Issue: audit: Files/directories
were installed but not shipped in any package:
 /usr/lib

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-24 09:06:29 -08:00
Yi Zhao
375549bdbf
googletest: upgrade 1.15.2.bb -> 1.16.0
Release Notes
https://github.com/google/googletest/releases/tag/v1.16.0

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-24 08:18:50 -08:00
Yi Zhao
ff0b697211
radvd: upgrade 2.19 -> 2.20
ChangeLog:
https://github.com/radvd-project/radvd/blob/v2.20/CHANGES

* Drop backport patch
* Add dependency libbsd
* Update rdavd.service
* Install systemd service file and sysvinit script separately through
  conditional statements.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-24 08:18:49 -08:00
Yi Zhao
8a29c46188
recipes: drop ld-is-gold support
The gold linker support has been dropped in oe-core[1]. Remove related
special cases and patches in recipes.

[1] https://git.openembedded.org/openembedded-core/commit/?id=a4addb9ab63011e7c604fc5daff95559e7d214e7

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-23 17:36:08 -08:00
Gyorgy Sarvari
7e576c0409
wireshark: fix SRC_URI
The original SRC_URI's content seems to be deleted regurarly,
when a new version is published, making the previous version
unavailable.

The new SRC_URI ("all-versions" folder) seems to be more
stable, the previous versions of Wireshark are not deleted from
there.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-23 09:56:37 -08:00
Peter Marko
c6e9064deb
python3-grpcio: revert unbundling abseil-cpp
This reverts commit 990b03b616.

>>> import grpc
Traceback (most recent call last):
  File "<python-input-0>", line 1, in <module>
    import grpc
  File "/usr/lib/python3.13/site-packages/grpc/__init__.py", line 22, in <module>
    from grpc import _compression
  File "/usr/lib/python3.13/site-packages/grpc/_compression.py", line 20, in <module>
    from grpc._cython import cygrpc
ImportError: /usr/lib/python3.13/site-packages/grpc/_cython/cygrpc.cpython-313-x86_64-linux-gnu.so: undefined symbol: _ZN4absl12lts_2024072212log_internal17kUnsignedCharNullE

Even installing whole abseil-ccp does not solve this.
ldd on this library does not include libraries containing this symbol.
Some work in linking upstram would be needed.

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-23 09:56:37 -08:00
Beniamin Sandu
d4036efd3f
rasdaemon: upgrade 0.8.0 -> 0.8.2
Signed-off-by: Beniamin Sandu <beniaminsandu@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-22 14:56:11 -08:00
Jan Vermaete
ed5e4031a4
wireshark: version bump 4.2.10 -> 4.2.11
The 4.2.10 was not longer available at the original SRC_URI.
At the new SRC_URI all version of the wireshark releases are available.

Signed-off-by: Jan Vermaete <jan.vermaete@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-22 08:58:27 -08:00
Khem Raj
ebc1cc47f9
gphoto: Fix the sed expression to remove --sysroot from config.h
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-21 17:38:04 -08:00
Soumya Sambu
02d14e5715
python3-django: upgrade 4.2.17 -> 4.2.18
Fixes CVE-2024-56374

Release Notes:
https://docs.djangoproject.com/en/dev/releases/4.2.18/

Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-21 11:54:39 -08:00
Soumya Sambu
1da8b9cd0e
python3-django: upgrade 5.0.10 -> 5.0.11
Fixes CVE-2024-56374

Release Notes:
https://docs.djangoproject.com/en/dev/releases/5.0.11/

Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-21 11:54:39 -08:00
Gyorgy Sarvari
492a53ede5
pcp: update SRC_URI
The original download location, jfrog's artifactory stopped
providing any kind of free service, and the source code is not
downloadable anymore.

The project however has an official github repository also -
change the SRC_URI to this to make it work again.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-20 11:53:45 -08:00
Wang Mingyu
aadc2ac9dc
geoip: fix do_fetch error
Change the SRC_URI to the correct value due to the following error:
ERROR: geoip-1.6.12-r0 do_fetch: Bitbake Fetcher Error: FetchError('Unable to fetch URL from any source.', 'http://sources.openembedded.org/GeoIP.dat.20181205.gz;apply=no;name=GeoIP-dat;')

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-20 08:32:46 -08:00
Peter Marko
a604cd55d8
sassc,libsass: move recipes to oe-core
These recipes are now part of oe-core:
https://git.openembedded.org/openembedded-core/commit/?id=0a1d3607da7bb7c586c69cefadf8ade52c7b1987

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-19 11:28:30 -08:00
Bartosz Golaszewski
8cf716ca6c
python3-gpiod: update to v2.3.0
This is a minor gpiod package release that brings in some new
interfaces, a significant typing rework, ruff and mypy conformity and a
slew of bug-fixes.

Signed-off-by: Bartosz Golaszewski <bartosz.golaszewski@linaro.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-19 09:36:17 -08:00
Bartosz Golaszewski
1e0beab0ed
libgpiod: update to v2.2.1
The main set of changes in this release doesn't concern yocto - it
brings in proper sphinx docs infrastructure for publishin on
readthedocs. We still have a bunch of code fixes though and we can also
remove the patch we're carrying in the recipe as it's upstream now.

Signed-off-by: Bartosz Golaszewski <bartosz.golaszewski@linaro.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-19 09:36:17 -08:00
Gyorgy Sarvari
c166308bc9
i2cdev: fix LICENSE
Only the library code (libi2cdev.h) is covered by GPL-2.0.
Otherwise the main license is LGPL-2.1

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-19 09:36:17 -08:00
Changqing Li
45766d265a
python3-wxgtk4: add RDEPENDS python3-cairocffi
Fix error:
>>> import wx.lib.wxcairo
Traceback (most recent call last):
  File "/usr/lib64/python3.13/site-packages/wx/lib/wxcairo/__init__.py", line 59, in <module>
    from .wx_cairocffi import _ContextFromDC, _FontFaceFromFont
  File "/usr/lib64/python3.13/site-packages/wx/lib/wxcairo/wx_cairocffi.py", line 34, in <module>
    import cairocffi
ModuleNotFoundError: No module named 'cairocffi'

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-18 19:23:49 -08:00
Changqing Li
62557d5fd6
python3-cairocffi: add new recipe
python3-wxgtk4 RDEPENDS cairocffi, so add this new recipe for it

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-18 19:23:49 -08:00
Khem Raj
29897344f7
mctp: Fix build with latest musl
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-17 21:35:47 -08:00
Khem Raj
f5b0a13f01
sblim-sfcb: Include string.h for memcpy
Fixes build with latest musl

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-17 12:16:16 -08:00
Khem Raj
05132e4ab4
multipath-tools: Fix build with latest musl
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-17 12:11:03 -08:00
Khem Raj
8ce451b7e2
liburing: Upgrade to 2.9
Drop upstreamed patches, fix build with latest musl

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-17 12:11:03 -08:00
Thu Nguyen
9b522de0f9
mctp: srcrev bump 9042704131d..dd944cf5b5a
Additional commit included in this version bump are below.

Jeremy Kerr (9):
  + tests: Add tests for dbus Network1 interface
  + tests: add System.del_address
  + tests: notify netlink socket on system link/neighbour/address/route
    changes
  + tests: Add NLSocket._create_msg
  + tests: rename NLSocket._send_resp to _send_msg
  + mctpd: fix error message and code for missing linkmap entry case
  + mctpd: remove unnecessary debug output
  + CHANGELOG: Add mctp-bench change

Thu Nguyen (1):
  + Support `LocalEIDs` property in `au.com.codeconstruct.MCTP.Network1`

Timon Liu (1):
  + mctp-bench: Add a utility tool to send/receive messages and display
    throughput

Signed-off-by: Thu Nguyen <thu@os.amperecomputing.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-17 10:16:24 -08:00
Rasmus Villemoes
42a4a8bd79
systemd-netlogd: new recipe
In some deployments, the log aggregator collects log messages in the
syslog format, so systemd-journal-upload and friends can not be
used.

systemd-netlogd is a daemon for filling that gap.

Signed-off-by: Rasmus Villemoes <ravi@prevas.dk>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-17 07:40:59 -08:00
Leon Anavi
e933824566
python3-typeguard: Upgrade 4.4.1 -> 4.4.2
Upgrade to release 4.4.2:

- Fixed TypeCheckError in unpacking assignment involving properties
  of a parameter of the function
- Fixed display of module name for forward references
- Fixed TypeError when using an assignment expression
- Fixed ValueError: no signature found for builtin when checking
  against a protocol and a matching attribute in the subject is a
  built-in function

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-17 07:40:59 -08:00
Leon Anavi
8a07f8d5c3
python3-humanize: Upgrade 4.11.0 -> 4.12.0
Upgrade to release 4.12.0:

- Add support for Python 3.14 and test PyPy3.11
- Handle en_GB and en_US locale
- Release to PyPI using Trusted Publishing

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-17 07:40:58 -08:00
Leon Anavi
6e97f274b9
python3-bandit: Upgrade 1.8.2 -> 1.8.3
Upgrade to release 1.8.3:

- Bump docker/build-push-action from 6.10.0 to 6.11.0
- Bump docker/build-push-action from 6.11.0 to 6.12.0
- Bump docker/build-push-action from 6.12.0 to 6.13.0
- [pre-commit.ci] pre-commit autoupdate
- Update bug template to include latest released versions
- Add markupsafe.Markup XSS plugin
- Warn not error on an nonexistant test given
- Bump sigstore/cosign-installer from 3.7.0 to 3.8.0
- Bump docker/setup-buildx-action from 3.8.0 to 3.9.0
- B107: Skip None values in hardcoded password detection
- Pytorch fix

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-17 07:40:58 -08:00
Leon Anavi
ce36130887
python3-simplejson: Upgrade 3.19.3 -> 3.20.1
Upgrade to release 3.20.1:

- Do not memoize keys before they are coerced to string

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-17 07:40:58 -08:00
Leon Anavi
14b839aab2
python3-cppy: Upgrade 1.3.0 -> 1.3.1
Upgrade to release 1.3.1:

- On Windows link to debug runtime lib when building with a debug
  Python

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-17 07:40:58 -08:00
Gyorgy Sarvari
4461fbe4f7
liboop: fix tcl PACKAGECONFIG
In case tcl PACKAGECONFIG is enabled, autoconf is trying to use tcl libs
and headers from the build system instead of using RECIPE_SYSROOT, and the
do_configure task fails:

ERROR: liboop-1.0.1-r0 do_configure: QA Issue: This autoconf log indicates errors, it looked at host include and/or library paths while determining system capabilities.
Rerun configure task after fixing this. [configure-unsafe]

The system path is hardcoded in the configure script. To fix this, patch
the configure script to use pkg-config to find tcl in the correct
sysroot.

Since the previous patch was changing the same part of the script, incorporate
that also into the new patch.

Also, set the correct build-time dependency.

The patch's Upstream-Status is "Pending", because
1. The project has been without activity for almost 15 years
2. Couldn't find info on the website on how to contribute
3. The GitLab instance mentioned on the website is password protected
even for read-only access, and registration is enabled only for
specific email addresses.
4. Couldn't find any contact info on the website to reach out
to the maintainers.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-17 07:40:58 -08:00
Gyorgy Sarvari
0ea9584b84
liboop: set correct LICENSE
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-17 07:40:58 -08:00
Changqing Li
569b675620
nginx: upgrade 1.27.3 to 1.27.4
License-Update: copyright year refreshed

Resolves:
* CVE-2025-23419

CHANGES:
https://nginx.org/en/CHANGES

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-16 23:42:42 -08:00
Changqing Li
66498315ca
nginx: upgrade 1.26.2 to 1.26.3
Solves:
* CVE-2025-23419

CHANGES:
https://nginx.org/en/CHANGES-1.26

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-16 23:42:42 -08:00
Gyorgy Sarvari
bdd2b53408
libplacebo: fix demos PACKAGECONFIG
In case the demos PACKAGECONFIG is enabled, linking fails with
the following error:

| /usr/src/debug/libplacebo/7.349.0/demos/plplay.c:669:(.text.startup+0x90): undefined reference to `parse_args'
| collect2: error: ld returned 1 exit status

The implementation of the missing function is guarded erroneously by
an ifdef flag (HAVE_NUKLEAR, which is only true in case headers from the nuklear
library are present - but in this recipe they are not included).

This patch moves the implementation of this function outside of the ifdef to
avoid the build failure.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-16 08:10:20 -08:00
Gyorgy Sarvari
964f55887a
libplacebo: fix glslang PACKAGECONFIG
In case glslang PACKAGECONFIG is enabled, compilation fails with
a lot of errors about undefined references from the glslang namespace, e.g.

| /usr/src/debug/libplacebo/7.349.0/src/glsl/glslang.cc:79:(.text+0x160): undefined reference to `glslang::TShader::TShader(EShLanguage)'

This has been solved in the upstream project, and this change backports
the commit that fixes the meson.build file to find the correct libraries
during compilation.

Additionally, fix also the TMPDIR QA error that popped up after fixing
the above issue: remove the RECIPE_SYSROOT value from the generated
pkgconf file (and instead of referring to the libraries by absolute path,
just refer to them by name, as they are supposed to be present in the
standard library lookup path).

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-16 08:10:20 -08:00
Alex Kiernan
54030f5611
gpiod-sysfs-proxy: Fix deprecation warning
Replace `\/` sequences to fix:

  gpiod-sysfs-proxy_0.1.2.bb: Var <MOUNTPOINT>:1: DeprecationWarning: invalid escape sequence \/

Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-16 08:10:20 -08:00
Gyorgy Sarvari
3564ec12de
nmap: add missing dependency
Building with ndiff PACKAGECONFIG failed with the following error:

|   File "/yocto/sandbox/build/tmp/work/cortexa53-poky-linux/nmap/7.95/nmap-7.95/ndiff/setup.py", line 11, in <module>
|     import setuptools.command.install
| ModuleNotFoundError: No module named 'setuptools'

Fix it by adding the missing dependency.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-15 19:30:23 -08:00
Zhang Peng
94ee7bf2db
lapack: fix lapack-ptest rdepends on lapack-dev
When LAPACKE is enabled, the QA check fails with the following error:
  ERROR: lapack-3.12.1-r0 do_package_qa: QA Issue: lapack-ptest rdepends on lapack-dev [dev-deps]
  ERROR: lapack-3.12.1-r0 do_package_qa: Fatal QA errors were found, failing task.
The root cause is that `lapack-ptest` accidentally installed `lapacke.pc`,
which is a development file intended to be included only in the `lapack-dev` package.
To resolve this: Remove `lapacke.pc` from the `lapack-ptest` installation

Signed-off-by: Zhang Peng <peng.zhang1.cn@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-15 19:30:23 -08:00
Markus Volk
3ab42ea30e
dav1d: update 1.5.0 -> 1.5.1
Changes for 1.5.1 'Sonic':
--------------------------
1.5.1 is a minor release of dav1d, focusing on optimizations and stack reduction:
 - Rewrite of the looprestoration (SGR, wiener) to reduce stack usage
 - Rewrite of {put,prep}_scaled functions
Now, the required stack space for dav1d should be: 62 KB on x86_64 and
58KB on arm and aarch64.
 - Improvements on the SSSE3 SGR
 - Improvements on ARM32/ARM64 looprestoration optimizations
 - RISC-V: blend optimizations for high bitdepth
 - Power9: blend optimizations for 8bpc
 - Port RISC-V to POSIX/non-Linux OS
 - AArch64: Add Neon implementation of load_tmvs
 - Fix a rare, but possible deadlock, in flush()

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-15 17:58:28 -08:00
Ayoub Zaki
6ef7d62a91
pkcs11-provider: Upgrade 0.6 -> 1.0
https://github.com/latchset/pkcs11-provider/releases/tag/v1.0
 https://github.com/latchset/pkcs11-provider/compare/v0.6...v1.0

Signed-off-by: Ayoub Zaki <ayoub.zaki@embetrix.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-14 20:27:18 -08:00
Gyorgy Sarvari
bf833ea600
rygel: drop obsolete PACKAGECONFIG
"lms" plugin has been dropped by the project starting version 0.43.0.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-14 20:27:18 -08:00