37919 Commits

Author SHA1 Message Date
Wang Mingyu
d8c310aa52
python3-werkzeug: upgrade 3.1.7 -> 3.1.8
Request.host and get_host return the empty string if the header is missing or has invalid characters.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:57 -07:00
Wang Mingyu
36111dde1a
python3-tzdata: upgrade 2025.3 -> 2026.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:57 -07:00
Wang Mingyu
ad83f5541f
python3-types-psutil: upgrade 7.2.2.20260130 -> 7.2.2.20260408
Changelog:
===========
- Use dashes instead of underscores for METADATA.toml field names
- Update most test/lint dependencies
- Update mypy to 1.20.0

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:57 -07:00
Wang Mingyu
11a2e0a7b4
python3-sqlalchemy: upgrade 2.0.48 -> 2.0.49
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:57 -07:00
Wang Mingyu
f3cad077fc
python3-snagboot: upgrade 2.6 -> 2.6.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:57 -07:00
Wang Mingyu
882dc303c9
python3-sentry-sdk: upgrade 2.56.0 -> 2.57.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:57 -07:00
Wang Mingyu
1813d9138c
python3-regex: upgrade 2026.3.32 -> 2026.4.4
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:56 -07:00
Wang Mingyu
edb96b0670
python3-python-multipart: upgrade 0.0.22 -> 0.0.24
Changelog:
============
- Validate chunk_size in parse_form()
- Remove unused trust_x_headers parameter and X-File-Name fallback
- Return processed length from QuerystringParser._internal_write
- Cleanup metadata dunders from __init__.py

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:56 -07:00
Wang Mingyu
b5fb673c18
python3-pandas: upgrade 3.0.1 -> 3.0.2
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:56 -07:00
Wang Mingyu
58e071451f
python3-orjson: upgrade 3.11.7 -> 3.11.8
Build and compatibility improvements.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:56 -07:00
Wang Mingyu
b3d1987115
python3-marshmallow: upgrade 4.2.3 -> 4.3.0
Changelog:
=============
- Add pre_load and post_load parameters to marshmallow.fields.Field for field-level pre- and post-processing
- Typing: improvements to marshmallow.validate
- marshmallow.validate.URL and marshmallow.validate.Email accept Internationalized Domain Names (IDNs)
  marshmallow.validate.Email also correctly rejects IDN domains with leading/trailing hyphens.
- Typing: Fix typing of nested in marshmallow.fields.Nested

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:56 -07:00
Wang Mingyu
36cbd5f66f
python3-icecream: upgrade 2.1.10 -> 2.2.0
Changelog:
============
- Improved: Fixes Japanese character encoding issues.
- Added: noColor option for configureOutput, which disables
  colored output. It is set to False by default.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:56 -07:00
Wang Mingyu
bae411b616
python3-google-auth-oauthlib: upgrade 1.3.0 -> 1.3.1
Changelog:
============
- Allow Protobuf 7.x
- Require Python 3.9

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:55 -07:00
Wang Mingyu
3f6557a279
python3-fastapi: upgrade 0.135.2 -> 0.135.3
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:55 -07:00
Wang Mingyu
355e8fcf2a
python3-faker: upgrade 40.12.0 -> 40.13.0
Fix: Ensure deterministic locale selection in multi-locale mode.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:55 -07:00
Wang Mingyu
644e0bc7af
python3-eventlet: upgrade 0.40.4 -> 0.41.0
Changelog:
============
* Switch to 3.14 for testing
* Drop 3.9 support
* More visible deprecation

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:55 -07:00
Wang Mingyu
cbd1da1f64
python3-cmake: upgrade 4.3.0 -> 4.3.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:55 -07:00
Wang Mingyu
041704b01c
python3-bitarray: upgrade 3.8.0 -> 3.8.1
Changelog:
==========
* fixed critial findings in C Extension Analysis Report
* add tests, in particular 'devel/test_capi.py'

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:55 -07:00
Wang Mingyu
2ff5277aac
python3-asyncinotify: upgrade 4.4.0 -> 4.4.2
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:54 -07:00
Wang Mingyu
c1f4f04b15
nbdkit: upgrade 1.47.5 -> 1.47.7
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:54 -07:00
Wang Mingyu
13f7a66c6d
mstpd: upgrade 0.1.1 -> 0.2.0
Changelog:
============
- README.md: update IRC channel location
- ctl_socket_server: require root for changing configuration
- mstp: validate admin port path costs
- mstp: do not allow changing Bridge Hello Time
- mstp: do not overflow calculated root path costs
- mstp: increase maxHops limit to 100
- README.md: add packaging status
- README.md: update FID/MSTI limits
- README.md: clarify IVL/SVL and MSTI support in linux
- packet: set socket priority to TC_PRIO_CONTROL
- TCSM: fix infinite recursion for MSTI per-tree ports

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:54 -07:00
Wang Mingyu
e1f754198e
libtorrent: upgrade 0.16.8 -> 0.16.9
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:54 -07:00
Wang Mingyu
227dc3f381
libsdl3: upgrade 3.4.2 -> 3.4.4
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:54 -07:00
Wang Mingyu
dfe6b82cc1
libsdl3-image: upgrade 3.4.0 -> 3.4.2
Changelog:
===========
- Non-animated images can now be loaded as single frame animations
- Fixed animated WebP frame composition
- Fixed potential buffer overflow in tRNS handling
- Fixed out of bounds read in XCF image loader (CVE-2026-35444)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:54 -07:00
Wang Mingyu
9a4ee804f5
libsdl2-image: upgrade 2.8.8 -> 2.8.10
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:53 -07:00
Wang Mingyu
7787315708
libcbor: upgrade 0.13.0 -> 0.14.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:53 -07:00
Wang Mingyu
92356431b9
libburn: upgrade 1.5.6 -> 1.5.8
0001-Bug-fix-Faulty-signal-handler-prototype-spoiled-comp.patch
removed since it's included in 1.5.8

Changelog:
=============
* Bug fix: burn_offst_source_new() parameter "size" rolled over at 2 exp 31
* Bug fix: ATA and SATA drives under sg did not register their SCSI address
           tuple
* Bug fix: WAVE files with unsuitable audio format were read as raw audio file.
* New API calls use and return off_t sizes instead of int or uint32_t
* Augmented struct burn_toc_entry by new off_t block addresses and counters
* New struct burn_progress_v2 and API call burn_drive_get_status_v2()
* New API call burn_disc_track_lba_nwa_v2()
* New API calls burn_disc_get_sectors_v2(), burn_session_get_sectors_v2(),
  burn_track_get_sectors_v2()
* New API call burn_get_read_capacity_v2()
* New API call burn_drive_release_v2()
* New API call burn_write_opts_set_perform_opc_v2
* New cdrskin option --audio_not_raw
* New cdrskin options --perform_opc and --perform_opc_growisofs

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:53 -07:00
Wang Mingyu
a0ba941017
gtk-layer-shell: upgrade 0.10.0 -> 0.10.1
Changelog:
==========
- Fix: unmap when surface is immediately requested to close after opening
- Fix: time out after 1 second of waiting for configure
- Fix: edge cases around montiros changing while being mapped
- gtk-priv: rename ast.py -> c_ast.py to avoid name collision with std lib
- Compat: bump supported GTK to v3.24.52

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:53 -07:00
Wang Mingyu
968b2a5f90
glaze: upgrade 7.2.2 -> 7.3.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:53 -07:00
Wang Mingyu
0cb4d92f4d
feh: upgrade 3.11.3 -> 3.12.1
Changelog:
==========
* Update tests to reflect the %f/%F changes implemented in v3.12
* Disallow %f and %n format specifiers in --action and --info strings;
  abort with an error message if those are encountered. Use %F and %N
  instead. Rationale: %f and %n do not escape shell-specific syntax and
  are thus a security risk when passing untrusted file names to feh. %F and
  %N, which have been available since v2.3 (Feb 2012), do escape
  shell-specific syntax. Migration path: Replace %f (or '%f') and %n (or
  '%n') with %F and %N (without '') in --action and --info commands.
* Fix formatting in man page for groff 1.23.0+
* Do not skip URLs when '--sort mtime' or similar are used
* Define '_GNU_SOURCE' macro for mkstemps usage (if enabled)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:53 -07:00
Wang Mingyu
5e2c613667
cryptsetup: upgrade 2.8.4 -> 2.8.6
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:52 -07:00
Wang Mingyu
f81a7251f3
catch2: upgrade 3.13.0 -> 3.14.0
Fixes
======
- Added missing <cstdint> includes.
- Fixed suppression of empty variadic macro arguments warning on Clang <19.
- Fixed catch_discover_tests failing during PRE_TEST discovery if a target does
  not have discoverable tests.
- Fixed build of the main library failing with CATCH_CONFIG_PREFIX_ALL defined.
- JUnit reporter outputs single failed (errored/skipped) assertion per test
  case.

Improvements =============
- The default implementation of --list-tags and --list-listeners has a quiet
  variant.
- Suppressed the new Clang warning about __COUNTER__ usage.
- Line-wrapping counts utf-8 codepoints instead of bytes.
- Combining character sequences are still miscounted, but Catch2 does not aim
  to fully support Unicode.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:52 -07:00
Wang Mingyu
7187db36cc
bolt: upgrade 0.9.10 -> 0.9.11
Changelog:
  Updated NHI PCI IDs: added Maple Ridge, ADL, TGL-H, RPL, MTL, and AMD Strix Point USB4 Routers.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:52 -07:00
Changqing Li
2966646af2
protobuf-c: upgrade 1.5.1 to 1.5.2
Changes[1]:
* Chase compatibility issues with Google protobuf 30.0-rc1 by @edmonds in https://github.com/protobuf-c/protobuf-c/pull/762
* protoc-gen-c: Explicitly construct strings where needed for protobuf 30.x by @edmonds in https://github.com/protobuf-c/protobuf-c/pull/768

Remove protobuf-30.patch, this patch already included in 1.5.2

[1] https://github.com/protobuf-c/protobuf-c/compare/v1.5.1...v1.5.2

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:52 -07:00
Peter Kjellerstedt
ed33569f82
jq: Use Git to fetch the code
There is a bug (see https://github.com/jqlang/jq/issues/434), which
results in an empty version being used if autoreconf is run on the jq
sources when using a release tar ball. The incorrect assumption is that
autoreconf is only used when fetching the code using Git.

The empty version results in an incorrect libjq.pc file being created
where the version is not set, which results in, e.g.,
`pkgconf --libs 'libjq > 1.6'` failing even if version 1.8.1 of jq is
actually installed.

Switch to fetching the code using Git to workaround the bug.

Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:52 -07:00
Harish Sadineni
eb16f0631e
layer.conf: add bcc into NON_MULTILIB_RECIPES
Here is the setting in bcc recipe:
COMPATIBLE_HOST = "(x86_64.*|aarch64.*|powerpc64.*|riscv64.*)-linux"

bcc only support 64 bit arch, so add it into NON_MULTILIB_RECIPES
to avoid expanding lib32- variant

Signed-off-by: Harish Sadineni <Harish.Sadineni@windriver.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:52 -07:00
Pascal Bach
cbd72087e6
fluentbit: upgrade 4.2.3.1 -> 5.0.2
Patches have been refreshed to apply to the new version.

Signed-off-by: Pascal Bach <pascal.bach@siemens.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:51 -07:00
Liu Yiding
7eb5d48aed
python3-ckzg: upgrade 2.1.1 -> 2.1.7
1.Changelog:
  https://github.com/ethereum/c-kzg-4844/releases/tag/v2.1.7

2.Remove python-ckzg-0001-Let-override-CC.patch as it was merged upstream

3.Remove python-ckzg-0002-Disable-Werror.patch as it was dropped in the Fedora package
  https://src.fedoraproject.org/rpms/python-ckzg/blob/rawhide/f/python-ckzg.spec

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:51 -07:00
Peter Marko
8d37aa1b42
poco: add config for fastlogger
It is a new feature in 1.15.0, enabled upstream by default.
It is part of Foundation library.
So this makes it possible to disable it.

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:51 -07:00
Peter Marko
a322194016
poco: fix powerpc build
Add patch which was also submitted upstream to quill.
Poco should get it when they update quill component.

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:51 -07:00
Zhixiong Chi
c90f012855
networkmanager: Do not ship initrd specific services into rootfs
Those systemd services were added in 1.54 upstream
https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/merge_requests/2089

According the comments we can see they are meant for the inird
other than using for rootfs. They will conflict with the main
services and can lead to potentially confusing error messages.
So remove them for now to avoid the following issue.

>$systemd-analyze --man=false verify \
> /lib/systemd/system/NetworkManager-wait-online-initrd.service
  Failed to put bus name to hashmap: File exists
  NetworkManager-initrd.service: Two services allocated for the \
  same bus name org.freedesktop.NetworkManager, refusing operation.

Test:
PASS: bitbake core-image-minimal
PASS: runqemu qemux86-64
PASS: systemd-analyze --man=false verify \
      /lib/systemd/system/NetworkManager.service

Signed-off-by: Zhixiong Chi <zhixiong.chi@windriver.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:51 -07:00
Markus Volk
b177ff1454
libcanberra: disable gtk-doc
gkt-doc build uses the deprecated gtkdoc-mktmpl tool, which was dropped by upstream
in version 1.26 of gtk-doc and fails if 'api-documentation' is in DISTRO_FEATURES.

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:51 -07:00
Liu Yiding
9aed335934
sanlock: upgrade 4.2.0 -> 5.1.0
Change SRC_URI to https://codeberg.org/sanlock/sanlock.git as sanlock source moved to it.

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:50 -07:00
Liu Yiding
d477f7e360
python3-tox: upgrade 4.49.0 -> 4.52.0
Changelog:
  https://tox.wiki/en/latest/changelog.html

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:50 -07:00
Liu Yiding
5cd2bb6427
python3-setuptools-git-versioning: upgrade 2.1.0 -> 3.0.1
Changelog:
 https://setuptools-git-versioning.readthedocs.io/en/v3.0.1/changelog/3.0.x.html

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:50 -07:00
Liu Yiding
a3b6a0c84d
python3-legacy-cgi: upgrade 2.6.2 -> 2.6.4
Add do_install function to resolve following issue.
  python3-legacy-cgi-2.6.4-r0 do_package_qa: QA Issue: /usr/lib/python3.14/site-packages/.pc/0001-cgi.py-fixup-interpreter-according-to-OE.patch/cgi.py contained in package python3-legacy-cgi requires /usr/local/bin/python, but no providers found in RDEPENDS:python3-legacy-cgi? [file-rdeps]

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:50 -07:00
Liu Yiding
998888c826
python3-pyatspi: upgrade 2.46.1 -> 2.58.2
Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:50 -07:00
Gianfranco Costamagna
fa1fd093ac
ettercap: 0.8.4-> 0.8.4.1
1. Changelog
   https://github.com/Ettercap/ettercap/releases/tag/v0.8.4.1

2. Remove following patches as they were merged upstream
   CVE-2026-3606.patch

Signed-off-by: Gianfranco Costamagna <locutusofborg@debian.org>
Signed-off-by: Gianfranco Costamagna <costamagnagianfranco@yahoo.it>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:50 -07:00
Peter Marko
6ccd072ec1
spdm-emu: use SkipRecipe instead of fatal error for unsupported architectures
Current code fails to parse meta-oe layer for machine with unsupported
architecture.
This is too restrictive as it requires downstream layers to play tricks
with masking the recipe. Usual way is to skip the recipe instead.

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:49 -07:00
Liu Yiding
cd7b52861d
python3-djangorestframework: upgrade 3.16.1 -> 3.17.1
Changelog:
  https://www.django-rest-framework.org/community/release-notes/#deprecation-policy

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:49 -07:00