38609 Commits

Author SHA1 Message Date
Markus Volk
9f158e8d87
cairomm-1.16: fix LIC_FILES_CHECKSUM
License changed from LGPL-2.0 to LGPL-2.1

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-12 07:29:06 -07:00
Markus Volk
67465bf19c
cairomm: fix LIC_FILES_CHECKSUM
License changed from LGPL-2.0 to LGPL-2.1

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-12 07:29:05 -07:00
Markus Volk
b09c364645
hwlock: update LIC_FILES_CHECKSUM
- SPDX license header has been added
- hwloc/base64.c is distributed under the ISC license

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-12 07:29:05 -07:00
Hemanth Kumar M D
b247a4d44b
directfb: fix build with GCC 16
GCC 16 requires std::set comparators to be callable on a const
comparator object. TaskManager::operator() is used as a comparator
but is not const-qualified, causing the build to fail.

Add the missing const qualifier to restore compatibility with GCC 16.

Link: https://github.com/deniskropp/DirectFB/issues/29

Signed-off-by: Hemanth Kumar M D <Hemanth.KumarMD@windriver.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-12 07:29:05 -07:00
Hemanth Kumar M D
bb0f82ea0c
bit7z: workaround array-bounds warnings with GCC 16
GCC 16 reports -Warray-bounds warnings which are treated as errors.

Reported upstream: https://gcc.gnu.org/bugzilla/show_bug.cgi?id=125743

Signed-off-by: Hemanth Kumar M D <Hemanth.KumarMD@windriver.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-12 07:29:05 -07:00
Markus Volk
7867221216
eog: update 49.3 -> 50.1
This avoids gi redefinition trouble

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-12 07:29:05 -07:00
Markus Volk
42681d2bc1
webkitgtk3: add PACKAGECONFIG for librice
webkitgtk3 enables librice support by default, thus build fails.
Add a PACKAGECONFIG for librice to handle this but disable by
default to not change our dependencies. librice requires clang-native
to build bindgen.

todo: enable this PACKAGECONFIG by default?

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-12 07:29:05 -07:00
Markus Volk
08e5e7a2dc
librice: add recipe
librice implements ice protocol in rust
It is used by default in recent webkitgtk source

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-12 07:29:04 -07:00
Markus Volk
413101c4fb
webkitgtk3: remove backported patch
The missing include has been added:
f540f4d1b1/Source/WebCore/contentextensions/ContentExtensionActions.h (L33)

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-12 07:29:04 -07:00
Markus Volk
0ac403a301
libdvdread: switch to meson buildsystem
autotools buildsystem has been removed:
do_configure: no configure script found

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-12 07:29:04 -07:00
Markus Volk
20aabad483
libdvdcss: switch to meson buildsystem
autotools buildsystem has been removed:
do_configure: no configure script found

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-12 07:29:04 -07:00
Markus Volk
8fce515120
libdvdnav: switch to meson buildsystem
autotools buildsystem has been removed:
do_configure: no configure script found

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-12 07:29:04 -07:00
Khem Raj
8a26ea844f
libdvdcss: upgrade 1.4.3 -> 1.5.0
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-12 07:29:03 -07:00
Khem Raj
b028c7c754
libdvdnav: upgrade 6.1.1 -> 7.0.0
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-12 07:29:03 -07:00
Khem Raj
572dc54e2c
libdvdread: upgrade 6.1.3 -> 7.0.1
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-12 07:29:03 -07:00
Markus Volk
6786892d37
exfatprogs: fix build after update
After current update I see:
| configure.ac:51: error: undefined or overquoted macro: AC_DEFINE
|       If this token and others are legitimate, please use m4_pattern_allow.
|       See the Autoconf documentation.

inherit pkgconfig to resolve dependency issues leading to this

This uncovered a missing dependency on blkid:

| checking pkg-config is at least version 0.9.0... yes
| checking for blkid >= 2.20... no
| checking for blkid... no
| configure: error: Package requirements (blkid) were not met:
|
| Package 'blkid' not found
|
| Consider adjusting the PKG_CONFIG_PATH environment variable if you
| installed software in a non-standard prefix.
|
| Alternatively, you may set the environment variables EXT2_BLKID_CFLAGS
| and EXT2_BLKID_LIBS to avoid the need to call pkg-config.

Add util-linux dependency

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-12 07:29:03 -07:00
Khem Raj
34a9fb4e4c
exfatprogs: upgrade 1.2.6 -> 1.4.1
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-12 07:29:03 -07:00
Mingli Yu
5d90e6543d
mariadb: Upgrade 11.4.10 -> 11.4.12
This release includes below security fixes:
  CVE-2026-49261
  CVE-2026-48165
  CVE-2026-48163

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-12 07:29:03 -07:00
Markus Volk
6a9438707b
nspr: align 0005-Makefile.in-remove-_BUILD_STRING-and-_BUILD_TIME.patch
After current update this patch fails:
'0005-Makefile.in-remove-_BUILD_STRING-and-_BUILD_TIME.patch'

and needs adjustment

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-12 07:29:02 -07:00
Jörg Sommer
b62f4643f1
gpsd: Add ncurses-terminfo to RRECOMMENDS
At least cgps needs the terminfo files to start. But other tools like
gpspipe work without it. Hence, only recommend it, but do not depend on it.

Signed-off-by: Jörg Sommer <joerg.sommer@navimatix.de>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-12 07:29:02 -07:00
Naman Jain
2c3c725a3b
nftables: Conditionally add ${PN}-python as RDEPENDS for ptest
This commit updates the RDEPENDS for the ptest package to include
${PN}-python only when the 'python' PACKAGECONFIG option is enabled.

This change will ensure that we dont get below failure when ptest is enabled in the distro features,
and packageconfig is not set.
It causes this error-
ERROR: Nothing RPROVIDES 'nftables-python' (meta-openembedded/meta-networking/recipes-filter/nftables/nftables_1.1.6.bb RDEPENDS on or otherwise requires it)
NOTE: Runtime target 'nftables-python' is unbuildable, removing...
Missing or unbuildable dependency chain was: ['nftables-python']
ERROR: Required build target 'nftables' has no buildable providers.
Missing or unbuildable dependency chain was: ['nftables', 'nftables-python']

Signed-off-by: Naman Jain <namanj1@kpit.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-12 07:29:02 -07:00
Yogesh Tyagi
6feb91601c
xdotool: avoid running host ldconfig during do_install
The upstream Makefile invokes ldconfig at install time, which runs the
host ldconfig against the target sysroot (${D}) and is both unnecessary
and non-deterministic for cross builds. Pass LDCONFIG=true to make the
install step a no-op for ldconfig, matching the WITHOUT_RPATH_FIX
handling already used here.

Signed-off-by: Yogesh Tyagi <yogesh.tyagi@intel.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-12 07:19:26 -07:00
Wang Mingyu
702acd16d7
python3-aiohttp: upgrade 3.13.5 -> 3.14.1
License-Update: add full apache license

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-12 07:19:26 -07:00
Markus Volk
9e45d712f2
gd: disable maybe-uninitialized error
This fixes build with gcc16 until a suitable solution is found:
https://github.com/libgd/libgd/issues/990

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-12 07:19:25 -07:00
Khem Raj
47ab5b9a8d
python3-scapy: Replace oe.utils.all_distro_featuresc with bb.utils.filter
oe.utils.all_distro_features is being removed.

Suggested-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-12 07:17:28 -07:00
Wang Mingyu
3806168af1
spectre-meltdown-checker: upgrade 26.33.0420460 -> 26.36.0602723
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-09 18:55:03 -07:00
Wang Mingyu
6b9932a9c2
python3-uvicorn: upgrade 0.44.0 -> 0.49.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-09 18:55:03 -07:00
Wang Mingyu
3745c6e673
python3-uefi-firmware: upgrade 1.13 -> 1.16
License-Update:
===============
- fix(packaging): build abi3 extension with stable suffix (#153)
- Fetch refs in release workflow
- Generate version dynamically from refs
- Add test dependencies (#151)

Changelog:
============
- Replace more bytes/str mixing
- Apply hardening fixes from upstream Tiano implementation
- Build generic stable ABI wheels targeting Python 3.10+
- Add test dependencies
- Parsing fixes and support for generate_checksums=True
- fix(packaging): build abi3 extension with stable suffix

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-09 18:55:03 -07:00
Wang Mingyu
1bb4ea4ca2
python3-typer: upgrade 0.26.4 -> 0.26.7
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-09 18:55:03 -07:00
Wang Mingyu
f1e3598217
python3-tox: upgrade 4.55.0 -> 4.55.1
Changelog:
 fix(config): propagate overrides through config references

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-09 18:55:03 -07:00
Wang Mingyu
706554e69b
python3-sentry-sdk: upgrade 2.61.0 -> 2.61.1
Changelog:
=============
- Pin fakeredis<2.36.0 in tests
- Unpin redis and fakeredis for tests
- (aiohttp) Unfurl spans explicitly instead of using pop()
- (tox) Migrate from pip to uv via tox-uv
- Pin redis<8 for rq

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-09 18:55:02 -07:00
Wang Mingyu
a887a8a188
python3-rich-toolkit: upgrade 0.19.10 -> 0.20.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-09 18:55:02 -07:00
Wang Mingyu
7ad06d7d6d
python3-python-multipart: upgrade 0.0.30 -> 0.0.32
Changelog:
============
- Speed up partial-boundary scanning for CR/LF-dense part data
- Speed up multipart header parsing and callback dispatch
- Bound header field name size before validating
- Validate Content-Length is non-negative in parse_form

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-09 18:55:02 -07:00
Wang Mingyu
66cf04e777
python3-pytest-aiohttp: upgrade 1.1.0 -> 1.1.1
Changelog:
===========
- Drop Python 3.9
- Typing improvements

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-09 18:55:02 -07:00
Wang Mingyu
7b4c4cf1a1
python3-pyais: upgrade 3.0.1 -> 3.1.0
Changelog:
===========
- implemented a pre-computed decoder plan for each class
- added json_to_data to aid in re-encoding JSON messages
- encode_msg & encode_dict now require a mandatory sentence argument

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-09 18:55:02 -07:00
Wang Mingyu
e319c1f874
python3-ipython: upgrade 9.14.0 -> 9.14.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-09 18:55:02 -07:00
Wang Mingyu
229ccfb4b9
python3-inline-snapshot: upgrade 0.34.0 -> 0.34.1
Changelog:
- Fixed snapshot_arg() to use the fix category (instead of create) when
  creating an argument with an existing non-ellipsis default argument value.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-09 18:55:01 -07:00
Wang Mingyu
0cc8f2f4bc
python3-filelock: upgrade 3.29.0 -> 3.29.1
Changelog:
===========
- docs: fix API docs of release()
- docs: clarify per-thread scope of FileLock configuration
- chore: improve filelock maintenance path
- fix(soft): refuse to follow symlinks when reading the lock file

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-09 18:55:01 -07:00
Wang Mingyu
377271b8ad
python3-faker: upgrade 40.19.1 -> 40.21.0
Changelog:
=========
- Add banks list for en_GB locale
- Add pan and gstin generators to en_IN SSN provider
- Improve barcode provider test coverage
- Bump liskin/gh-problem-matcher-wrap from 3 to 4

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-09 18:55:01 -07:00
Wang Mingyu
b1303254ff
python3-cyclonedx-python-lib: upgrade 11.7.0 -> 11.8.0
Changelog:
=============
- chore: extract glob for pyupgrade to separate script for cross-platform compatibility
- docs: update CDX summary
- chore: fix test coverage reporting
- chore(deps-dev): update tomli requirement from 2.3.0 to 2.4.1
- chore(release): use own GH app for releasing
- chore(ci): pin GitHub Actions to immutable SHAs while preserving tag tracking
- chore: add zizmor workflow to harden GitHub Actions security
- Update PULL_REQUEST_TEMPLATE.md
- chore: Update CONTRIBUTING.md
- chore(ci): comments for pinned actions
- feat: add support CycloneDX 1.7.1 & 1.6.2 & 1.5.1
- chore(deps): bump actions/create-github-app-token from 3.1.1 to 3.2.0
- chore(deps): bump actions/download-artifact from 7.0.0 to 8.0.1
- chore(deps): bump actions/upload-artifact from 6.0.0 to 7.0.1
- feat: pull SPDX license IDs v1.1-3.28.0

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-09 18:55:01 -07:00
Wang Mingyu
77ec4f1e00
python3-cmd2: upgrade 3.5.1 -> 4.0.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-09 18:55:01 -07:00
Wang Mingyu
759c9fce51
python3-cbor2: upgrade 6.1.1 -> 6.1.2
Changelog:
===========
- Fixed incorrect tracking of string references for definite-length text
  strings of length greater than 65536
- Fixed cbor2.load() crash caused by incorrect handling of internal read buffer
  extension during stream deserialization.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-09 18:55:01 -07:00
Wang Mingyu
849546a867
python3-beautifulsoup4: upgrade 4.14.3 -> 4.15.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-09 18:55:00 -07:00
Wang Mingyu
88de7c1468
proftpd: upgrade 1.3.9a -> 1.3.9b
Changelog:
==========
- Issue 2057 - SQL Injection in mod_wrap2_sql via reverse DNS
  hostname (CVE-2026-44331).
- Issue 2056 - Incomplete fix for session management with OpenSSL 3.2.x or
  later, when using TLSv1.2 or earlier.  This complements the fix for
  Issue #1963.
- Issue 2098 - Hard quota limits on uploads do not cause SFTP WRITE requests
  to fail as expected.
- Issue 2102 - SSH payload length underflow calculation for ETM/ChaChaPoly
  algorithms in mod_sftp.
- Issue 2104 - SSH packet with empty payload triggers null pointer dereference
  in mod_sftp.
- Issue 2106 - Bad DSA signatures can lead to out-of-bounds read of heap memory
  in mod_sftp.
- Issue 2108 - Mismatched RSA/DSA algorithm signatures can lead to null
  dereference in mod_sftp.
- Issue 2115 - SFTP request payload length underflow calculation in mod_sftp.
- Issue 2120 - Several modules fail to build using OpenSSL 4.0.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-09 07:26:35 -07:00
Wang Mingyu
0b1addd8cd
pcsc-tools: upgrade 1.7.4 -> 1.7.5
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-09 07:26:35 -07:00
Wang Mingyu
c317345bd4
libdbi-perl: upgrade 1.647 -> 1.648
License-Update: Copyright year updated to 2026.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-09 07:26:35 -07:00
Wang Mingyu
9775e7d42b
imagemagick: upgrade 7.1.2-24 -> 7.1.2-25
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-09 07:26:34 -07:00
Wang Mingyu
1393ce3d7f
hiredis: upgrade 1.3.0 -> 1.4.0
Improvements
================
- Increase required cmake version to 3.15
- Use ffc (pure-C99) as the RESP3 double parser instead of strtod
- FetchContent should not include cpack
- Add C++ compatibility to sds.h
- Apply FD_CLOEXEC on sockets

Bug Fixes
=============
- fix: add NULL check for c->funcs in redisReconnect
- Fix buffer overflow in tests.

Maintenance
===============
- Fix CI for macOS and docker based runs.
- Fix CI on MacOS runners.
- Define ssize_t as intptr_t in Windows

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-09 07:26:34 -07:00
Wang Mingyu
6bf220159d
freeradius: upgrade 3.2.9 -> 3.2.10
Changelog:
 Correct bug where detail file reader would not read files.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-09 07:26:34 -07:00
Wang Mingyu
f2a901aa5c
freeipmi: upgrade 1.6.17 -> 1.6.18
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-09 07:26:34 -07:00