36699 Commits

Author SHA1 Message Date
Gyorgy Sarvari
b92c4e249b
python3-h2: remove ptest execution deadline
Hypothesis Python module applies a 200ms default timeout value on
the tests, that can be violated too easily in qemu without kvm support.

Hypothesis however also has a feature, that in case it is running in a CI
environment, it expects that the host has more load, and it removes this
deadline.

To switch to the CI profile and relax the execution timeouts, this patch
defines the "CI" environment variable in the run-ptest script.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 08:53:46 -08:00
Ankur Tyagi
63ae47a70d
libjxl: Fix build error with arm and musl
Build fails for qemuarm with musl with following error:
/build/tmp/work/cortexa15t2hf-neon-poky-linux-musleabi/libjxl/0.11.1/sources/libjxl-0.11.1/lib/jxl/convolve_separable5.cc
| error: out of range pc-relative fixup value

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 08:53:46 -08:00
Ankur Tyagi
30942cebe8
mozjs-128: Fix build error with arm and musl
Build fails for qemuarm with musl with following error:
mozglue/misc/StackWalk.o: in function `unwind_callback(_Unwind_Context*, void*)':
| /usr/src/debug/mozjs-128/128.5.2/mozglue/misc/StackWalk.cpp:810:(.text._ZL15unwind_callbackP15_Unwind_ContextPv+0x4): undefined reference to `_Unwind_GetIP'

Referenced commit[1] for the fix, also refreshed patches.

[1] bb86629123

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 08:53:46 -08:00
Wang Mingyu
38119992d8
python3-bleak: upgrade 2.0.0 -> 2.1.1
1. Changelog:
   https://github.com/hbldh/bleak/blob/v2.1.1/CHANGELOG.rst

2. Skip integration tests in ptest
   After upgrade to 2.1.1, a new test set integration was added.
   https://github.com/hbldh/bleak/tree/v2.1.1/tests/integration

   According to the description, the tests need kernel module hci_vhci,
   but hci_vhci is disabled in yocto, so skip these tests.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 08:53:45 -08:00
Gyorgy Sarvari
ba6468f7a0
python3-m2crypto: mark CVE-2020-25657 as patched
Details: https://nvd.nist.gov/vuln/detail/CVE-2020-25657

The commit[1] that fixes the vulnerability has been part of the
package since version 0.39.0

[1]: 84c53958de

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 08:53:45 -08:00
Gyorgy Sarvari
b46a5452a1
python3-m2crypto: ignore CVE-2009-0127
Details: https://nvd.nist.gov/vuln/detail/CVE-2009-0127

The vulnerability is disputed[1] by upstream:
"There is no vulnerability in M2Crypto. Nowhere in the functions
are the return values of OpenSSL functions interpreted incorrectly.
The functions provide an interface to their users that may be
considered confusing, but is not incorrect, nor it is a vulnerability."

[1]: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-0127

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 08:53:45 -08:00
Wang Mingyu
8f67ff2a34
tcpdump: upgrade 4.99.5 -> 4.99.6
add-ptest.patch
refreshed for 4.99.6

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 08:53:45 -08:00
Wang Mingyu
a778ae59d9
spdlog: upgrade 1.16.0 -> 1.17.0
License-Update: updated contributors.

Changelog:
==========
- Bump bundled {fmt} library to 12.1.0
- Fix the %z formatter (UTC offset):
- Windows: Replaced implementation for better accuracy and speed
- FreeBSD: Fixed incorrect implementation
- Fixed issue where the offset was not displaying as +00:00 when the formatter
  was configured to show UTC time.
- Removed unreliable fallback for Unix systems lacking tm_gmtoff. If
  compilation fails on such platforms, use SPDLOG_NO_TZ_OFFSET=ON (%z will
  display +??:?? instead of compilation error).
- Set CMAKE_BUILD_TYPE only in top-level project
- Change access scope for ANSI target_file_ from private to protected
- Fix UWP detection
- Fix include <fcntl.h> in tcp_client.h to avoid compilation failures
- Tests: Fix unit tests to respect default level names
- Docs: Fix misleading comment in blocking_queue header
- Fix sign-compare warning
- Fix sign conversion warnings in qt_sinks.h

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 08:53:45 -08:00
Wang Mingyu
08302db298
rtorrent: upgrade 0.16.5 -> 0.16.6
Features
---------
Added timestamp helper commands
Use separate thread for saving session data
Run multiple session save requests in parallel
Changed magnet metadata handling and added 'magnet.path.set'

Optimizations
-------------
Use map rather than vector for Poll tables

Bug Fixes
-----------
Convert IPv4in6 addresses to IPv4 in outgoing handshakes
Force clear bitfield ranges of downloads that get hashed
Use CURLOPT_CLOSESOCKETFUNCTION to properly handle libcurl closing sockets before CURL_POLL_REMOVE

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 08:53:45 -08:00
Wang Mingyu
7db6f31b0f
python3-types-psutil: upgrade 7.1.1.20251122 -> 7.2.1.20251231
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 08:53:44 -08:00
Wang Mingyu
65ed8861f7
python3-pillow: upgrade 12.0.0 -> 12.1.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 08:53:44 -08:00
Wang Mingyu
1b8c883667
python3-nocaselist: upgrade 2.1.0 -> 2.2.0
Changelog:
 https://nocaselist.readthedocs.io/en/2.2.0/changes.html

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 08:53:44 -08:00
Wang Mingyu
6a9c1e9114
python3-nocasedict: upgrade 2.1.0 -> 2.2.0
Changelog:
 https://nocasedict.readthedocs.io/en/2.2.0/changes.html

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 08:53:44 -08:00
Wang Mingyu
9206e31273
python3-moteus: upgrade 0.3.96 -> 0.3.97
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 08:53:44 -08:00
Wang Mingyu
86cabd1603
python3-marshmallow: upgrade 4.1.2 -> 4.2.0
Changelog:
 many argument of Nested properly overrides schema instance value.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 08:53:44 -08:00
Wang Mingyu
0997a483e7
nbdkit: upgrade 1.46.0 -> 1.47.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 08:53:43 -08:00
Wang Mingyu
0fbbddd537
libtracefs: upgrade 1.8.2 -> 1.8.3
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 08:53:43 -08:00
Wang Mingyu
72a9807f37
libtorrent: upgrade 0.16.5 -> 0.16.6
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 08:53:43 -08:00
Wang Mingyu
0991466b1e
libsdl3-image: upgrade 3.2.4 -> 3.2.6
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 08:53:43 -08:00
Wang Mingyu
d7d45f20ef
libmbim: upgrade 1.33.1 -> 1.34.0
Changelog:
==========
* Build:
  ** New "-Dmbim_groupname=<name>" meson build option to restrict MBIM kernel
     device access to a given Unix group and root. The access check works
     in parallel to the "-Dmbim_username" option; passing either check allows
     access to the kernel device (eg, logical OR).

* New Intel AT Tunnel service, including the following operations:
  * MBIM_CID_INTEL_AT_TUNNEL_AT_COMMAND

* Extended the SMS service:
  * MBIM_CID_SMS_CONFIGURATION now supports notifications

* mbimcli:
  ** New '--sms-query-configuration' and '--sms-query-message-store-status'
     actions
  ** New '--atds-query-rat' and '--atds-query-operators' actions

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 08:53:43 -08:00
Wang Mingyu
60106a8990
libio-socket-ssl-perl: upgrade 2.095 -> 2.096
Changelog:
- Allow stacking TLS layers with SSL_usebio
  This also allows LWP (after patches) to access https site through TLS
  enabled proxy

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 08:53:43 -08:00
Wang Mingyu
8142a5dad4
libdbd-sqlite-perl: upgrade 1.76 -> 1.78
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 08:53:42 -08:00
Wang Mingyu
be1b0daac0
gpsd: upgrade 3.27.2 -> 3.27.3
Changelog:
 Fix API major value.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 08:53:42 -08:00
Wang Mingyu
ebf2be3435
fping: upgrade 5.4 -> 5.5
Changelog:
===========
- New option -J / --json for JSON output. See doc/fping-json.md for
  the JSON schema. This feature is still in alpha and the schema
  might change in future releases
- The -g, --generate option now also supports IPv6 addresses
- New option --seqmap-timeout to control the time after which sequence
  numbers can be used again
- Fix OpenBSD sprintf() warning
- Fix fallback to SO\_TIMESTAMP if SO\_TIMESTAMPNS is not available
- When reading target names from file or standard input, lines longer
  than the static buffer are no longer interpreted as more than one line
- Typo fix in error message when SO\_BINDTODEVICE fails
- Options --print-tos and --print-ttl now also work for IPv6, and no
  longer require privileges
- Report received ICMPv6 error messages
- Suppress duplicate reports in count mode with -q, --quiet or -Q, --squiet
- Switch to alpine-based multi-stage Docker build to reduce image size
  and improve build performance; add OpenContainers-compatible labels
- Print receive ping moved to new functions
- Avoid unsigned overflow when determining the memory size to save
  response times on systems where size\_t is the same as unsigned int
- Document the new minimum value for the -p option
- Fix build without IPv6 support
- Fix debug build use of dbg_printf in fping.c
- Remove MacOS-specific test for -I option
- GitHub Actions fixes
- Fix measurement of time for timed reports (-Q) to start after DNS name
  resolution.
- Updated autoconf from 2.71 to 2.72
- Updated automake from 1.16.5 to 1.18.1
- Updated libtool from 2.4.6 to 2.5.4
- Implemented verification of autotools tarballs in Github actions.
- Implemented stricter flag value checking (e.g. -c 10xyz is not accepted anymore).

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 08:53:42 -08:00
Wang Mingyu
f0db676880
ddrescue: upgrade 1.29.1 -> 1.30
Changelog:
===========
* Replace pass 5 of copying with a sweeping phase after trimming.
* New option '-N, --no-sweep' to disable reading of skipped areas.
  Reassign short name '-N' from option '--no-trim' to '--no-sweep'.
* main.cc. Make '--size=output' use the size of outfile.
  (do_rescue): Make '-x 0' extend outfile to size of infile.
* main_common.cc (strtoll_): New function accepting underscores.
* rescuebook.cc (fcopy_non_tried, rcopy_non_tried): Limit pass 2 to
  blocks adjacent to a finished block. (Delimit bad area as a whole).
  (trim_errors): Trim only edges adjacent to a finished block.
  Initial skip size now defaults to (infile_size / 32_768).
  Only retrim blocks adjacent to a non-tried or finished block.
  (update_rates): Don't force update of a_rate, c_rate, ts.
  (Rescuebook): Estimate remaining time from last 60 seconds.
* genbook.cc (format_time), loggers.cc (format_time_dhms): Add years.
* loggers.cc (Event_logger): Add finished_size, a_rate, read errors.
* ddrescuelog.cc: New option '-H, --make-test'.
* ddrescue.texi: Document rescue with lziprecover's recovery record.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 08:53:42 -08:00
Wang Mingyu
af8315f17b
ctags: upgrade 6.2.20251130.0 -> 6.2.20260104.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 08:53:42 -08:00
Gyorgy Sarvari
38eaab2241
python3-waitress: add ptest support
It takes <10s to execute.

Some (54) tests are not compatible with musl[1] - due to this the tests are on the problem-list.

Sample output snippet:

root@qemux86-64:~# ptest-runner
START: ptest-runner
2026-01-07T09:57
BEGIN: /usr/lib/python3-waitress/ptest
PASS: tests.test_adjustments.TestAdjustments.test_bad_port
PASS: tests.test_adjustments.TestAdjustments.test_badvar
PASS: tests.test_adjustments.TestAdjustments.test_default_listen
[...many lines...]
PASS: tests.test_wasyncore.Test_readwrite.test_socketerror_in_disconnected
PASS: tests.test_wasyncore.Test_readwrite.test_socketerror_not_in_disconnected
PASS: tests.test_wasyncore.Test_write.test_gardenpath
PASS: tests.test_wasyncore.Test_write.test_non_reraised
PASS: tests.test_wasyncore.Test_write.test_reraised

============================================================================
Testsuite summary
\# TOTAL: 783
\# PASS: 775
\# SKIP: 8
\# XFAIL: 0
\# FAIL: 0
\# XPASS: 0
\# ERROR: 0
DURATION: 7
END: /usr/lib/python3-waitress/ptest
2026-01-07T09:57
STOP: ptest-runner
TOTAL: 1 FAIL: 0

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 08:53:42 -08:00
Viswanath Kraleti
096f14d0b9
modemmanager: upgrade 1.22.0 -> 1.24.2
Changelog:
https://gitlab.freedesktop.org/mobile-broadband/ModemManager/-/blob/mm-1-24/NEWS

Signed-off-by: Viswanath Kraleti <viswanath.kraleti@oss.qualcomm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 08:53:41 -08:00
Viswanath Kraleti
bf2fa106d6
libqmi: upgrade 1.34.0 -> 1.38.0
Changelog:
https://gitlab.freedesktop.org/mobile-broadband/libqmi/-/blob/qmi-1-38/NEWS

Signed-off-by: Viswanath Kraleti <viswanath.kraleti@oss.qualcomm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 08:53:41 -08:00
Leon Anavi
b6ddf00e8c
python3-termcolor: Upgrade 3.2.0 -> 3.3.0
Upgrade to release 3.3.0:

- Add support for italic
- can_colorize: Expect fileno() to raise OSError, as documented

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-07 09:09:29 -08:00
Leon Anavi
312155a7d6
python3-behave: Upgrade 1.3.2 -> 1.3.3
Upgrade to release 1.3.3:

- FIXED: Broke Python 2.7 support

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-07 09:09:29 -08:00
Leon Anavi
d2501971b2
python3-astroid: Upgrade 4.0.2 -> 4.0.3
Upgrade to release 4.0.3:

- Fix inference of IfExp (ternary expression) nodes to avoid
  prematurely narrowing results in the face of inference ambiguity.
- Fix base class inference for dataclasses using the PEP 695
  typing syntax.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-07 08:18:57 -08:00
Leon Anavi
5ff2ec190a
python3-anyio: Upgrade 4.12.0 -> 4.12.1
Upgrade to release 4.12.1:

- Changed all functions currently raising the private
  NoCurrentAsyncBackend exception (since v4.12.0) to instead raise
  the public NoEventLoopError exception
- Fixed anyio.functools.lru_cache not working with instance methods

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-07 08:18:56 -08:00
Leon Anavi
7721e7a6fc
python3-bumble: Upgrade 0.0.220.bb -> 0.0.221
Upgrade to release 0.0.221:

- Cancel l2cap connection result future on abort
- Implement extended advertising emulation
- Rust: Fix cargo-all-features to 1.11.0
- L2CAP Enhanced Retransmission mode
- Add some docs about Android and Hardware
- bump pdl dependencies versions
- android-netsim transport enhancements
- Upgrade GitHub Actions for Node 24 compatibility
- Upgrade GitHub Actions to latest versions
- GATT: fix redefinition of GATT_CONTENT_CONTROL_ID_CHARACTERISTIC
- Remove unused imports
- Fix missing type hints on Device.notify_subscribers()
- L2CAP: Enhanced Credit-based Flow Control Mode
- use ruff for linting and import sorting
- hot fix: remove unused import
- Ruff: Add and fix UP rules
- add support for multiple concurrent broadcasts
- Add EATT Support
- Fix some typos and annotations

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-07 08:18:56 -08:00
Peter Kjellerstedt
254f1285e8
net-snmp: Update to 5.9.5.2
5.9.5.1:
* Only a version numbering fix.

5.9.5.2:
* Fix an issue with needing limits.h included.

Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-06 23:33:06 -08:00
Leon Anavi
bc8066fd7f
python3-fastapi: Upgrade 0.124.4 -> 0.128.0
Upgrade to release 0.128.0:

- Drop support for pydantic.v1
- Run performance tests only on Pydantic v2

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-06 07:36:35 -08:00
Leon Anavi
656bbf2c70
python3-networkx: Upgrade 3.6 -> 3.6.1
Upgrade to release 3.6.1:

API Changes

- Add spectral bipartition community finding and greedy bipartition
  using node swaps

Enhancements

- Nodelists for from_biadjacency_matrix
- Add spectral bipartition community finding and greedy bipartition
  using node swaps
- Fix draw_networkx_nodes with list node_shape and add regression
  test

Bug Fixes

- Fix: allow graph subclasses to have additional arguments

Documentation

- DOC: Improve benchmarking readme
- DOC: More details re: RC releases in the release process devdocs
- DOC: clarify difference between G.nodes/G.nodes() and
  G.edges/G.edges() in tutorial
- DOC: Add blurb to contributor guide about drawing tests
- DOC: Fix underline lens in docstrings
- Rolling back shortest paths links

Maintenance

- MAINT: Replace string literal with comment
- Bump actions/checkout from 5 to 6 in the actions group
- pin python 3.14 to be version 3.14.0 until dataclasses are fixed
- Blocklist Python 3.14.1

Other

- TST: add tests for unsupported graph types in MST algorithms
- TST: clean up isomorphism tests

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-06 07:36:35 -08:00
Leon Anavi
382e4de7d8
python3-brotli: Upgrade 1.1.0 -> 1.2.0
Upgrade to release 1.2.0:

SECURITY

- python: added Decompressor::can_accept_more_data method and optional
  output_buffer_limit argument Decompressor::process;
  that allows mitigation of unexpectedly large output;
  reported by Charles Chan (https://github.com/charleswhchan)

Added

- decoder/encoder: added static initialization to reduce binary size
- python: allow limiting decoder output (see SECURITY section)
- CLI: brcat alias; allow decoding concatenated brotli streams
- kt: pure Kotlin decoder
- cgo: support "raw" dictionaries
- build: Bazel modules

Removed

- java: dropped finalize() for native entities

Fixed

- java: in compress pass correct length to native encoder

Improved

- build: install man pages
- build: updated / fixed / refined Bazel buildfiles
- encoder: faster encoding
- cgo: link via pkg-config
- python: modernize extension / allow multi-phase module
  initialization

Changed

- decoder / encoder: static tables use "small" model (allows 2GiB+
  binaries)

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-06 07:36:35 -08:00
Leon Anavi
768a039171
python3-parse-type: Upgrade 0.6.3 -> 0.6.6
Upgrade to release 0.6.6:

- Disable setuptools-scm: Too many side-effects

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-06 07:36:35 -08:00
Leon Anavi
b248542954
python3-pyro5: Upgrade 5.15 -> 5.16
Upgrade to release 5.16:

- project going into super low maintenance mode, I don't plan on
  working on it any longer unless nasty bugs are reported.
- properties can now be a streaming generator too
- loopCondition is relayed from start_ns_loop() to its daemon
- removed Python 3.8 and 3.9 from the support list (they are EOL).
  Now supported on Python 3.10 or newer.
- docs: clarify @expose on a class not automatically exposing base
  class(es).

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-06 07:36:34 -08:00
Jason Schonberg
3f9b0b867c
xfce4-panel: upgrade 4.20.0 -> 4.20.1
Changelog: https://gitlab.xfce.org/xfce/xfce4-panel/-/tags/xfce4-panel-4.20.1

Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-05 18:16:19 -08:00
Gyorgy Sarvari
9eabbca905
python3-ldap: upgrade 3.4.4 -> 3.4.5
Contains fixes for CVE-2025-61911 and CVE-2025-61912

Changelog:
Security fixes:
- CVE-2025-61911 (GHSA-r7r6-cc7p-4v5m): Enforce str input in
  ldap.filter.escape_filter_chars with escape_mode=1; ensure proper
  escaping.
- CVE-2025-61912 (GHSA-p34h-wq7j-h5v6): Correct NUL escaping in
  ldap.dn.escape_dn_chars to \00 per RFC 4514.

Fixes:
- ReconnectLDAPObject now properly reconnects on UNAVAILABLE, CONNECT_ERROR
  and TIMEOUT exceptions (previously only SERVER_DOWN), fixing reconnection
  issues especially during server restarts
- Fixed syncrepl.py to use named constants instead of raw decimal values
  for result types
- Fixed error handling in SearchNoOpMixIn to prevent a undefined variable error

Tests:
- Added comprehensive reconnection test cases including concurrent operation
  handling and server restart scenarios

Doc:
- Updated installation docs and fixed various documentation typos
- Added ReadTheDocs configuration file

Infrastructure:
- Add testing and document support for Python 3.13

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-05 18:16:19 -08:00
Gyorgy Sarvari
c6ac2c467d
python3-flask-cors: upgrade 4.0.0 -> 5.0.0
Contains fix for CVE-2024-6221 and CVE-2024-1681

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-05 18:16:19 -08:00
Gyorgy Sarvari
cbb4f9d4e0
python3-configobj: ignore CVE-2023-26112
Details: https://nvd.nist.gov/vuln/detail/CVE-2023-26112

The fix[1] is already included in the recipe version (5.0.9),
the CVE can be marked as patched.

[1]: 7c618b0bba

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-05 18:16:19 -08:00
Gyorgy Sarvari
1d7c7549b3
python3-cbor2: upgrade 5.7.1 -> 5.8.0
Contains fix for CVE-2025-68131

Changelog:
- Added readahead buffering to C decoder for improved performance.
  The decoder now uses a 4 KB buffer by default to reduce the number
  of read calls. Benchmarks show 20-140% performance improvements for
  decoding operations.
- Fixed Python decoder not preserving share index when decoding array
  items containing nested shareable tags, causing shared references to
  resolve to wrong objects
- Reset shared reference state at the start of each top-level encode/decode
  operation

Ptests passed:
...
PASS: tests/test_tool.py:test_dtypes_from_file
PASS: tests/test_tool.py:test_ignore_tag
PASS: tests/test_types.py:test_frozendict
============================================================================
Testsuite summary
DURATION: 4

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-05 18:16:18 -08:00
Gyorgy Sarvari
06996cf65b
imagemagick: upgrade 7.1.2-11 -> 7.1.2-12
Contains fix for CVE-2025-69204

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-05 18:16:18 -08:00
Leon Anavi
7722db14ce
python3-autobahn: Upgrade 25.11.1 -> 25.12.2
Upgrade to release 25.12.2:

Build & CI/CD:

- Synchronize CI/CD, FlatBuffers vendoring, and wamp-ai/wamp-cicd
  submodules between autobahn-python and zlmdb
- Switch manylinux container from 2_34 to 2_28 for x86_64 ISA
  compatibility (fixes auditwheel flatc bundling)
- Increase ARM64 build timeout to 60 minutes for QEMU emulation
- Add .github/workflows/README.md documenting CI/CD architecture
- Consolidate download-github-release and download-release-artifacts
  recipes
- Add checksum verification to artifact download workflow

FlatBufers:

- Simplify vendored FlatBuffers - use upstream as-is
- Track vendored FlatBuffers in git (like zlmdb approach)
- Add version() function to vendored FlatBuffers runtime
- Add check_zlmdb_flatbuffers_version_in_sync() for cross-project
  compatibility
- Generate .bfbs files for WAMP schemas during wheel build

Other:

- Rename install-flatc to install-flatc-system with prominent warning
- Remove legacy readthedocs.yml to activate .readthedocs.yaml
- Remove dev-latest optional dependency (PyPI rejects direct URLs)

License-Update: Standardize LICENSE with SPDX header

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-05 18:16:18 -08:00
Leon Anavi
8b5e1f5dbf
python3-filelock: Upgrade 3.20.1 -> 3.20.2
Upgrade to release 3.20.2:

- Support Unix systems without O_NOFOLLOW
- [pre-commit.ci] pre-commit autoupdate

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-05 18:16:18 -08:00
Leon Anavi
05103ac2c1
python3-send2trash: Upgrade 1.8.3 -> 2.0.0
Upgrade to release 2.0.0:

- Drop suport for Python 2
- Fix test_trash_topdir failing on macOS
- Update source installation instructions
- Update gio implementation, don't use deprecated GObject.GError

License-Update: The license remains the same

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-05 18:16:18 -08:00
Khem Raj
cef23383bf
python3-wrapt: Upgrade to 2.0.1
Switch to Pypi fetcher
Switch to PEP-517 build backend

Fixes
WARNING: python3-wrapt-2.0.1-r0 do_check_backend: QA Issue: inherits setuptools3 but has pyproject.toml with setuptools.build_meta, use the correct class [pep517-backend]

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-05 18:15:25 -08:00