This is not how yocto builds work: any needed executables
should come from the build itself, with limited exceptions
listed in HOSTTOOLS. flatpak is entirely capable of building
without requiring them upfront.
Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
- add a patch to fix build for the newly added wayland_security_context feature
- build wayland_security_context according to wayland distro_feature
- add GIR_MESON_OPTION
- add packageconfigs for selinux and http_backend
Dependencies:
In distributions that compile Flatpak to use a separate bubblewrap (bwrap)
executable, version 0.8.0 is now required.
Enabling the optional Wayland security context feature requires
libwayland-client, wayland-scanner >= 1.15 and wayland-protocols >= 1.32.
Ubuntu 18.04 is no longer routinely tested. Support for dependency
versions included in Ubuntu 18.04 should be considered "at risk".
Features:
Add --device=input, for access to evdev devices in /dev/input (#5481)
Update bundled copy of bubblewrap to version 0.8.0, and rely on its
features:
Improve error message if seccomp is disabled in kernel config
Security hardening: set user namespace limit to 0, to prevent creation
of nested user namespaces in a more robust way (#5084)
For subsandboxes started by flatpak-portal, inherit environment
variables from the flatpak run that started the original instance
rather than from flatpak-portal, fixing behaviour of FLATPAK_GL_DRIVERS
and similar features (#5278)
Stop http transfers if a download in progress becomes very slow (#5519)
Make it easier to configure extra languages, by picking them up from
AccountsService if configured there (#5006)
Add new flatpak_transaction_add_rebase_and_uninstall() API,
allowing end-of-life apps to be replaced by their intended replacement
more reliably (#3991)
Create a private Wayland socket with the "security context" extension
if available, allowing the compositor to identify connections from
sandboxed apps as belonging to the sandbox (#4920, #5507, #5558)
Update libglnx to 2023-08-29
Use features of newer GLib versions if available
Turn off system-level crash reporting infrastructure during
some unit tests that involve intentional assertion failures
Add anchors to link to sections of flatpak-metadata documentation (#5582)
New translations: ka, nl.
Bug fixes:
Avoid warnings processing symbolic links with GLib >= 2.77.0, and
with GLib 2.76.0 (GLib 2.76.1 or later silences these warnings)
Bypass page cache for backend requests in revokefs, fixing installation
errors with libostree 2023.4 (#5452)
Show AppStream metadata in flatpak remote-info as intended
(#5523; regression in 1.9.1)
Don't let Flatpak apps inherit VK_DRIVER_FILES or VK_ICD_FILENAMES
from the host system, which would be wrong for the sandbox (#5553)
Fix build failure with prereleases of libappstream 0.17.x (#5472)
Forward-compatibility with libappstream 1.0 (#5563)
Fix installation with Meson if configured with -Dauto_sideloading=true
(#5495)
Fix a memory leak (#5329)
Fix compiler warnings (#5362, #5366)
Make the tests fail more comprehensibly if a required tool is missing
(#5020)
Clean up /var/tmp/flatpak-cache-* directories on boot (#1119)
Don't force GIO_USE_VFS=local for programs launched via flatpak-spawn
(#5567)
Clarify documentation for D-Bus name ownership (#5582)
Translation updates: id, tr, zh_CN
(#5332, #5565)
Internal changes:
Split up large source files into smaller modules, reducing internal
circular dependencies (#5410, #5411, #5415, #5419, #5416, #5414)
Re-synchronize code backported from GLib with the version in GLib
(#5410)
Make the flags used to apply "extra data" clearer (#5466)
Use glnx_opendirat() where possible (#5527)
CI improvements (#5374, #5381)
(There was never a 1.15.5 release, I got our versioning convention mixed up and
thought we avoided releasing odd micro versions.)
Signed-off-by: Khem Raj <raj.khem@gmail.com>
The usage of nobranch=1 in SRC_URI allows using unprotected branches.
This change updates the real branch name in place of nobranch=1 for these components.
Signed-off-by: Sourav Kumar Pramanik <pramanik.souravkumar@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
- use system bubblewrap and xdg-dbus-proxy instead of building subprojects
- fix seccomp PACKAGECONFIG
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
There is new patch-status QA check in oe-core:
https://git.openembedded.org/openembedded-core/commit/?id=76a685bfcf927593eac67157762a53259089ea8a
This is temporary work around just to hide _many_ warnings from
optional patch-status (if you add it to WARN_QA).
This just added
Upstream-Status: Pending
everywhere without actually investigating what's the proper status.
This is just to hide current QA warnings and to catch new .patch files being
added without Upstream-Status, but the number of Pending patches is now terrible:
5 (26%) meta-xfce
6 (50%) meta-perl
15 (42%) meta-webserver
21 (36%) meta-gnome
25 (57%) meta-filesystems
26 (43%) meta-initramfs
45 (45%) meta-python
47 (55%) meta-multimedia
312 (63%) meta-networking
756 (61%) meta-oe
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
1.15.3
Released: 2023-02-21
Build system:
Building this version of Flatpak with Meson is recommended. The source release flatpak-1.15.3.tar.xz no longer contains Autotools-generated files, although this version can still be built using Autotools after running ./autogen.sh. Future versions are likely to remove the Autotools build system.
Bug fixes:
When splitting an upgrade into two steps (download without installing, and then upgrade without allowing further downloads) like GNOME Software does, if an app is marked EOL and superseded by a replacement, don't remove the superseded app in the first step, which would result in the replacement incorrectly not being installed (#5172)
Fix a crash when --socket=gpg-agent is used (#5095)
Fix a crash when listing apps if one of them is broken or misconfigured (#5293)
If an app has invalid syntax in its overrides or metadata, mention the filename in the error message (#5293)
Unset $GDK_BACKEND for apps, ensuring GTK apps with --socket=fallback-x11 can work (#5303)
Fix a deprecation warning when compiled with curl >= 7.85 (#5284)
Translation updates: es, ru (#5266, #5312, #5313)
Internal changes:
Better diagnostic messages for why runtimes are or are not considered unused (#5237)
1.15.2
Released: 2023-02-06
Bug fixes:
Never try to export a parent of reserved directories as a --filesystem,
for example /run, which would prevent the app from starting (#5205, #5207)
Never try to export a --filesystem below /run/flatpak or /run/host,
which could similarly prevent the app from starting
The above change also fixes apps not starting if a --filesystem is a
symlink to the root directory (#1357)
Show a warning when the --filesystem exists but cannot be shared with
the sandbox (#1357, #5035, #5205, #5207)
Display the intended messages for flatpak repair (#5204)
Exporting an app to an existing repository on a CIFS filesystem
now works as intended (#5257)
Unset $GIO_EXTRA_MODULES for apps, avoiding misbehaviour in some GLib
apps when set to a path on the host (#5206)
Unset $XKB_CONFIG_ROOT for apps, avoiding crashes in GTK and Qt apps
under Wayland when this variable is set to a path not available in the
sandbox (#5194)
When using the fish shell, avoid duplicate XDG_DATA_DIRS entries if the
profile script is sourced more than once (#5198)
Update included copy of bubblewrap to 0.7.0 for better error messages
Install SELinux files correctly when building with Meson
Translation updates: ru, tr (#5256, #5262)
Internal changes:
Update included copy of libglnx
flatpak -v now uses the INFO log level, and flatpak -vv uses the
DEBUG log level in the flatpak log domain. Previously, the extra
messages that were logged by flatpak -vv were in a separate "flatpak2"
log domain. G_MESSAGES_DEBUG=flatpak previously had an effect similar to
flatpak -v, and is now more similar to flatpak -vv.
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Helper tools for sandboxed applications
Provides support for thumbnailing, email and xdg-open
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
