Commit Graph

36170 Commits

Author SHA1 Message Date
Liu Yiding
2c9a4075ef
python3-pytest-mock: upgrade 3.14.1 -> 3.15.1
1. Changelog:
   https://github.com/pytest-dev/pytest-mock/releases/tag/v3.15.1

2. Remove 0001-Add-asyncio-fixture-to-test_instance_async_method_sp.patch as it has been mergerd upstream.

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-11-25 07:44:42 -08:00
Wang Mingyu
7433f87f32
python3-coverage: upgrade 7.11.3 -> 7.12.0
Changelog:
============
- The HTML report now shows separate coverage totals for statements and
  branches, as well as the usual combined coverage percentage.
- The JSON report now includes separate coverage totals for statements and
  branches
- Fix: except* clauses were not handled properly under the "sysmon" measurement
  core, causing KeyError exceptions
- Fix: we now defend against aggressive mocking of open() that could cause
  errors inside coverage.py.
- Fix: in unusual cases where a test suite intentionally exhausts the system's
  file descriptors to test handling errors in open(), coverage.py would fail
  when trying to open source files
- A small tweak to the HTML report: file paths now use thin spaces around
  slashes to make them easier to read.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-11-25 07:44:42 -08:00
Wang Mingyu
ab1216dde2
python3-cmake: upgrade 4.1.2 -> 4.2.0
Changelog:
=============
- ci: build with clang instead of gcc
- docs: improve links back to GitHub
- chore: add changelog exclusion for bots

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-11-25 07:44:42 -08:00
Wang Mingyu
7c760f0b54
python3-cfgv: upgrade 3.4.0 -> 3.5.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-11-25 07:44:42 -08:00
Wang Mingyu
361c98e554
python3-bleak: upgrade 1.1.1 -> 2.0.0
Added
------
- Added bleak.backends.get_default_backend() and BleakBackend enum for a
  centralized backend detection.
- Added BleakClient().backend_id and BleakScanner().backend_id properties to
  identify the backend in use.

Changed --------
- Use "AcquireNotify" rather than "StartNotify" for Linux backend on supported
  characteristics
- Allow multiple calls to disconnect() on Windows to align behavior over all
  backends.
- Raise new BleakBluetoothNotAvailableError when Bluetooth is not supported,
  turned off or permission is denied.

Fixed ------
- Fixed potential race condition causing timeout while connecting in WinRT
  backend.
- Fixed file handle leak in BlueZ backend when D-Bus connection is lost and
  re-established.
- Fixed crash in CoreBluetooth backend if an ObjC delegate callback is called
  after the asyncio run loop stops.
- Fixed possible deadlock when starting scanning on Windows when Bluetooth is
  turned off.
- Fixed "Bluetooth device is turned off" Exception on macOS, when a Bluetooth
  permission request popup is shown to the user by the OS.

Removed ---------
- Removed support for Python 3.9.
- Removed support for macOS < 10.15.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-11-25 07:44:42 -08:00
Wang Mingyu
2e73a5158c
python3-bandit: upgrade 1.8.6 -> 1.9.2
Changelog:
==========
- Add instructions for Maintainers to create/publish a release
- Replace deprecated datetime.datetime.utcnow()
- Fix typos
- Support of Python 3.14
- Drop support of end-of-life Python 3.9
- More Python version related fixes
- Argparse Python 3.14 enhancements
- Check whether Constant value is str

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-11-25 07:44:41 -08:00
Wang Mingyu
cb3b22adc4
python3-asyncinotify: upgrade 4.2.1 -> 4.3.2
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-11-25 07:44:41 -08:00
Wang Mingyu
eb786d6314
python3-asgiref: upgrade 3.10.0 -> 3.11.0
Changelog:
=============
- "sync_to_async" gains a "context" parameter, similar to those for
  "asyncio.create_task", "TaskGroup" &co, that can be used on Python 3.11+ to
  control the context used by the underlying task.
  The parent context is already propagated by default but the additional
  control is useful if multiple "sync_to_async" calls need to share the same
  context, e.g. when used with "asyncio.gather()".

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-11-25 07:44:41 -08:00
Wang Mingyu
351ac66213
openvpn: upgrade 2.6.15 -> 2.6.16
Code maintenance / Compat changes
---------------------------------
- adapt to new "encrypt-then-mac" cipher suites in OpenSSL 3.6.0 - these
  need special handling which we don't do, so the t_lpback self-test
  failed on them.  Exclude from list of allowed ciphers, as there is no
  strong reason today to make OpenVPN use these.
- fix various compile-time warnings

Documentation updates
---------------------
- fix outdated and non-HTTPS URLs throughout the tree (doxygen, warnings,
  manpage, ...)

Bugfixes
--------
- Fix memcmp check for the hmac verification in the 3way handshake.
  This bug renders the HMAC based protection against state exhaustion on
  receiving spoofed TLS handshake packets in the OpenVPN server inefficient.
  CVE: 2025-13086
- fix invalid pointer creation in tls_pre_decrypt() - technically this is
  a memory over-read issue, in practice, the compilers optimize it away
  so no negative effects could be observed.
- Windows: in the interactive service, fix the "undo DNS config" handling.
- Windows: in the interactive service, disallow using of "stdin" for the
  config file, unless the caller is authorized OpenVPN Administrator
- Windows: in the interactive service, change all netsh calls to use
  interface index and not interface name - sidesteps all possible attack
  avenues with special characters in interface names.
- Windows: in the interactive service, improve error handling in
  some "unlikely to happen" paths.
- auth plugin/script handling: properly check for errors in creation on
  $auth_failed_reason_file (arf).
- for incoming TCP connections, close-on-exec option was applied to
  the wrong socket fd, leaking socket FDs to child processes.
- sitnl: set close-on-exec flag on netlink socket
- ssl_mbedtls: fix missing perf_pop() call (optional performance profiling)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-11-25 07:44:41 -08:00
Wang Mingyu
10776ec8a7
nss: upgrade 3.117 -> 3.118.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-11-25 07:44:41 -08:00
Wang Mingyu
90343e1990
nautilus: upgrade 49.1 -> 49.2
* Bugfixes:
- Fix handling of unset XDG directories
- Reduce memory usage of thumbnails by correct scaling
- Fix potential rescaling of item when switching to cut icon
- Fix crash on empty file lists in drops
- Correct sorting of loopback devices
- Don't skip the first file from operation progress monitoring

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-11-25 07:44:41 -08:00
Wang Mingyu
f8f560d335
libgphoto2: upgrade 2.5.32 -> 2.5.33
serial:
* added caching

canon:
* use caching from serial driver

ptp2:
* fixed crash on capture regression
* added new ids:
  * Sony ZV-E10M2
  * Fuji X-M5
  * Ricoh GR IIIx (corrected id)
* imported libmtp ids

translations: updated romanian, chinese, polish, ukrainian

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-11-25 07:44:40 -08:00
Wang Mingyu
70fe5394f9
lcms: upgrade 2.16 -> 2.17
Changelog:
==========
- Add fuzzers foundation. Many thanks to Amir Montazery and Open Source Technology Improvement Fund (ostif.org), Google, for funding that.
- Add ability to disable building tests in meson
- Fixed gamut warning not working on certain conditions
- Mac sequoia added to test beds
- Add the possibility of duplicating a NULL context for cloning defaults.
- Small cleanup of CGATS parser
- Change computation of profile ID to follow actual ICC spec (yes, they changed the spec!)
- Allow to apply color management on memory blocks > 4Gb
- Get rid of samples on meson compilation
- Increase coverage of premultiplied alpha.
- Bug fixing and cosmetical work on sources.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-11-25 07:44:40 -08:00
Wang Mingyu
2c18b9a441
gpsd: upgrade 3.26.1 -> 3.27
Changelog:
============
-  Improve support for newer signal ids (L1/L2/L5, etc.).
-  xgps add signal id names
-  gpsrinex, support new signal ids.  Add -g and --gnss options.
-  Initial SPARTNv2 support.  Disabled by default, terrible protocol.
-  Many ubxtool updates for newer u-blox receivers.
-  Update driver_ubx for newer u-blox receivers.
-  Lexer() FFI interface is unused, and deprecated October 2025.
-  xgps and xgpsspeed work under Wayland.
-  Add support for Qt6.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-11-25 07:44:40 -08:00
Wang Mingyu
a051c8db8b
fuse3: upgrade 3.16.2 -> 3.17.4
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-11-25 07:44:40 -08:00
Wang Mingyu
75c786b537
debootstrap: upgrade 1.0.141 -> 1.0.142
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-11-25 07:44:40 -08:00
Liu Yiding
aa8fd63b49
sdbus-c++-tools: upgrade 2.1.0 -> 2.2.1
Changelog:
https://github.com/Kistler-Group/sdbus-cpp/releases/tag/v2.2.1

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-11-25 07:44:40 -08:00
Liu Yiding
9fb5981859
sdbus-c++: upgrade 2.1.0 -> 2.2.1
Changelog:
https://github.com/Kistler-Group/sdbus-cpp/releases/tag/v2.2.1

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-11-25 07:44:39 -08:00
Liu Yiding
22af3b81a7
lvm2: upgrade 2.03.36 -> 2.03.37
Changelog:
Mostly bugfix release, with most focus on dmeventd, persitent reservations,
lvmdevices, and improvement in tests.

* Improvements in dmeventd thread safety, shutdown times and more.
* Many fixes and improvements for persistent reservations.
* Support output in list mode for all lvmconfig --typeconfig types with --list.
* Fix deadlock in lvmdbusd on SIGINT in lvm shell mode.
* And many more.

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-11-25 07:44:39 -08:00
Tom Geelen
d56cd727c7
python3-pytest-httpx: New recipe
Sends responses to httpx.

Signed-off-by: Tom Geelen <t.f.g.geelen@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-11-24 21:54:47 -08:00
Randy MacLeod
e730ee0c60
rsyslog: upgrade 8.2506.0 -> 8.2510.0
Full Changelog:
   https://github.com/rsyslog/rsyslog/blob/v8-stable/ChangeLog

Avoid buildpath error:
   QA Issue: File /usr/lib/rsyslog/ptest/tests/.deps/liboverride_getaddrinfo_la-override_getaddrinfo.Plo
These .deps directories are created at configure time and mainly used
in an interactive development environment. Remove test/.deps to eliminate
the error.

Drop: use-pkgconfig-to-check-libgcrypt.patch
since it's implemented upstream by:
   85e03c0e8 Replace libgcrypt-config with pkg-config
   8ba35bf6c Add missing libraries to pkg-config call
as per: https://github.com/rsyslog/rsyslog/pull/5406/commits

For musl, drop: 0001-Include-sys-time-h.patch
which oddly doesn't seem to be required to build any of: qemux86-64, qemuarm64,
and qemuarm.

Rebase other patches as needed.

ptest results for qemux86-64/kvm with extra FS space and 2 GB RAM:

   Version | Total | Passed | Failed | Skipped
   8.2506  |   485 |    479 |      0 |       6
   8.2510  |   497 |    491 |      0 |       6

rsyslog works when built with musl but there are lots of ptest failures:

   Version | Total | Passed | Failed | Skipped
   8.2506  |   485 |    306 |    172 |       7
   8.2510  |   497 |    310 |    180 |       7

Note that with this update the results are similarily bad. If someone is
interested and has time, they can work on improving the musl ptest results.

Signed-off-by: Randy MacLeod <Randy.MacLeod@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-11-24 21:54:47 -08:00
Gyorgy Sarvari
ed8a1038d2
tigervnc: ignore CVE-2014-8241
Details: https://nvd.nist.gov/vuln/detail/CVE-2014-8241

The vulnerability is about a potential null-pointer dereference, because
of a malloc result is not verified[1].

The vulnerable code has been refactored since completely[2], and the code isn't
present anymore in the codebase.

[1]: https://github.com/TigerVNC/tigervnc/issues/993#issuecomment-612874972 - attachment
[2]: b8a24f055f

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-11-24 21:54:47 -08:00
Gyorgy Sarvari
af4df551ee
cockpit: set correct CVE_PRODUCT
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-11-24 21:54:47 -08:00
Leon Anavi
0f4d401d94
python3-pikepdf: Add recipe
Add recipe for v10.0.2:

- Fixed presentation of strings using unparse_content_stream -
  if the stream can be represented using PdfDocEncoding, it is
  rendered in that way for ease of reading.
- Reformatted C++ source.

This work was sponsored by GOVCERT.LU.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-11-24 21:54:46 -08:00
Leon Anavi
f029ebca5c
python3-unidecode: Add recipe
Add recipe for release 1.4.0:

- Drop support for Python <3.7.
- Add replacements for playing card suits and chess pieces
- Add replacements for U+211F "RESPONSE" and 0x2123 "VERSICLE"
- Fix replacement for U+1D6D5 "MATHEMATICAL BOLD SMALL TAU".
- Fix replacements for U+014A "LATIN CAPITAL LETTER ENG" and
  U+014B "LATIN SMALL LETTER ENG".
- Add replacements for U+2103 "DEGREE CELSIUS" and U+2109 "DEGREE
  FAHRENHEIT".

This work was sponsored by GOVCERT.LU.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-11-24 21:54:46 -08:00
Mingli Yu
a5ef451fb7
mariadb: Upgrade 11.4.8 -> 11.4.9
Remove the 0001-Ensure-compatibility-with-ARMv9-by-updating-.arch-di.patch
patch as its logic included in new version [1].

Release notes: https://mariadb.com/docs/release-notes/community-server/11.4/11.4.9

[1] e8026a5019

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-11-24 21:54:46 -08:00
Jason Schonberg
49894e57b0
gsoap: upgrade 2.8.135 -> 2.8.137
From the changelog.md file:

  Version 2.8.137 (02/21/2025)
  ---
  - Minor update to improve XML entity parsing within limits.

  Version 2.8.136 (01/28/2025)
  ---
  - Updated TLS/SSL demo server and client certificates and keys.

Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-11-23 23:11:37 -08:00
Gyorgy Sarvari
a993eb8b93
libao: ignore CVE-2017-11548
Both Suse[1] and Debian[2] disputes that this is a vulnerability in libao.
Based on their investigation while an issue exists, it is not in libao, however
higher in the audio-toolchain, most likely in libmad or mpg321. There seem to
be nothing to be fixed about this in libao - ignore this CVE due to this.

[1]: https://bugzilla.suse.com/show_bug.cgi?id=1081767
[2]: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=870608

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-11-23 17:58:13 -08:00
Jason Schonberg
53db086b35
php: upgrade 8.4.14 -> 8.4.15
This is a bug fix release.

Changelog: https://www.php.net/ChangeLog-8.php#8.4.15

Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-11-23 17:58:12 -08:00
Jason Schonberg
8a04d45a4e
xdebug: upgrade 3.4.6 -> 3.4.7
[2025-10-26] — Xdebug 3.4.7
    Fixed bug #2359: PHP 8.4 Lazy Ghost Object inoperable/defunct when Xdebug is enabled
    Fixed bug #2371: Step debugging initialize lazy objects
    Fixed bug #2375: Xdebug's exception trace conversion initialises lazy objects

Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-11-23 09:33:36 -08:00
Gyorgy Sarvari
35bc4860f1
exiv2: add ptest support
The project has extensive runtime- and unittest suite - make use of it.

It takes around 10 seconds to run both suites.

Added two patches:
One is needed to convert python unittest output into automake output.

The other is required to be able to configure test data folder at
compile time - otherwise the tests are looking for the test-data
with absolute paths from the build machine.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-11-23 09:05:41 -08:00
Yoann Congal
09c7f76c19
libunix-statgrab: Put LD export in do_configure
Toolchains (gcc/clang) forcibly define LD (LD = ...), so, override it in
the do_configure task.

This fixes this build error (seen on AB[0]):
| Checking for pkg-config... .../tmp/work/x86-64-v3-poky-linux/libunix-statgrab/0.112/recipe-sysroot-native/usr/bin/pkg-config
| Checking for pkg-config package of libstatgrab... Unsupported compile language "C" at Makefile.PL line 39.
| -lstatgrab -lpthread
| Checking for library containing sg_get_process_stats_r... WARNING: .../run.do_configure.38403:154 exit 255 from 'perl Makefile.PL INSTALLDIRS=vendor NO_PERLLOCAL=1 NO_PACKLIST=1 PERL=$(which perl)'
| WARNING: Backtrace (BB generated script):
| 	#1: cpan_do_configure, .../tmp/work/x86-64-v3-poky-linux/libunix-statgrab/0.112/temp/run.do_configure.38403, line 154
| 	#2: do_configure, .../tmp/work/x86-64-v3-poky-linux/libunix-statgrab/0.112/temp/run.do_configure.38403, line 147
| 	#3: main, .../tmp/work/x86-64-v3-poky-linux/libunix-statgrab/0.112/temp/run.do_configure.38403, line 189
NOTE: recipe libunix-statgrab-0.112-r0: task do_configure: Failed
ERROR: Task (meta-openembedded/meta-perl/recipes-perl/libstatgrab/libunix-statgrab_0.112.bb:do_configure) failed with exit code '1'

[0]: https://autobuilder.yoctoproject.org/valkyrie/#/builders/87/builds/77/steps/38/logs/stdio

Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-11-23 00:12:01 -08:00
Ming Liu
0c29947cea
ostree: use "+=" to set PACKAGE_BEFORE_PN
This avoid overridding the original PACKAGE_BEFORE_PN value could be
set in bbclasses.

Signed-off-by: Ming Liu <liu.ming50@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-11-22 09:30:52 -08:00
Yoann Congal
861d46b60e python3-propcache: add BBCLASSEXTEND native & nativesdk
Since commit 82c2959678 ("python3-yarl: add BBCLASSEXTEND = "native nativesdk""),
python3-yarl-native (resp. nativesdk-python3-yarl) needs
python3-propcache-native (nativesdk-python3-yarl) to build.

Cc: Tom Geelen <t.f.g.geelen@gmail.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-11-21 16:16:34 -08:00
Yoann Congal
9404c6d022 python3-pylddwrap: add BBCLASSEXTEND native & nativesdk
nativesdk-python3-pylddwrap is needed for the dependency tree :
`-> nativesdk-python3-checksec-py

Cc: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-11-21 16:16:34 -08:00
Yoann Congal
2a4ba1eaba python3-icontract: add BBCLASSEXTEND nativesdk
nativesdk-python3-icontract is needed for the dependency tree :
`-> nativesdk-python3-pylddwrap
    `-> nativesdk-python3-checksec-py

Cc: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-11-21 16:16:34 -08:00
Yoann Congal
bc993e8f6c python3-asttokens: add BBCLASSEXTEND nativesdk
nativesdk-python3-asttokens is needed for the dependency tree :
`-> nativesdk-python3-icontract
   `-> nativesdk-python3-pylddwrap
       `-> nativesdk-python3-checksec-py

Cc: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Acked-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-11-21 16:16:34 -08:00
Leon Anavi
3d7894aa32
python3-pybind11: Upgrade 2.13.6 -> 3.0.1
Upgrade to version 3.0.1:

- Fixed compilation error in `type_caster_enum_type` when casting
  pointer-to-enum types. Added pointer overload to handle
  dereferencing before enum conversion.
- Implement binary version of `make_index_sequence` to reduce
  template depth requirements for functions with many parameters.
- Subinterpreter-specific exception handling code was removed to
  resolve segfaults.
- Fixed issue that caused ``PYBIND11_MODULE`` code to run again if
  the module was re-imported after being deleted from
  ``sys.modules``.
- Prevent concurrent creation of sub-interpreters as a workaround
  for stdlib concurrency issues in Python 3.12.
- Fixed potential crash when using `cpp_function` objects with
  sub-interpreters.
- Fixed non-entrant check in `implicitly_convertible()`.
- Support C++20 on platforms that have older c++ runtimes.
- Fix compilation with clang on msys2.
- Avoid `nullptr` dereference warning with GCC 13.3.0 and python
  3.11.13.
- Fix potential warning about number of threads being too large.
- Fix gcc 11.4+ warning about serial compilation using CMake.

This work was sponsored by GOVCERT.LU.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-11-21 07:23:31 -08:00
Leon Anavi
5ac890daa0
python3-lief: Upgrade 0.16.7 -> 0.17.1
Upgrade to release 0.17.1:

- Fix missing visibility
- Fix incorrect paging computations that occurred when only a
  subset of formats was enabled.
- Fix include issue with the COFF format

This work was sponsored by GOVCERT.LU.

License-Update: Update years

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-11-21 07:23:31 -08:00
Khem Raj
2d33949443
open-vm-tools: Avoid GLib g_free macro redefinition error
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-11-21 00:39:01 -08:00
Leon Anavi
3789c3be6d
libheif: Upgrade 1.19.8 -> 1.20.2
Upgrade to release 1.20.2:

- When opening tiled images, do not check against maximum image size
  immediately to allow for tile-based decoding of very large images.
- Several smaller fixes in writing image sequences
- CMake option to disable building of heif-view, which pulls in
  dependency on SDL
- Fixes reading/writing of GIMI content IDs
- Some build fixes

This work was sponsored by GOVCERT.LU.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-11-21 00:39:01 -08:00
Leon Anavi
a920c43339
python3-pillow-heif: Upgrade 0.22.0 -> 1.1.1
Upgrade to release 1.1.1:

- libheif was updated from the 1.20.1 to 1.20.2 version.
- macOS: Wheels now support older macOS versions like Catalina
  (x86_64 CPU) or Ventura (ARM CPU)

1.0.0 changelog:

- Support for YCbCr AUX images.
- AVIF support was dropped, as the new upcoming Pillow has
  native AVIF support.
- libde265 was updated from the 1.0.15 to 1.0.16 version.
- Removed deprecated PyPy 3.9 wheels & added PyPy 3.11 wheels.

This work was sponsored by GOVCERT.LU.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-11-21 00:39:00 -08:00
Yi Zhao
d1672fa209
re2: add UPSTREAM_CHECK_GITTAGREGEX
Add UPSTREAM_CHECK_GITTAGREGEX to check the correct latest stable
verison.

Before the patch:
$ devtool latest-version re2
INFO: Current version: 2024.03.01
INFO: Latest version: 2025
INFO: Latest version's commit: 927f5d53caf8111721e734cf24724686bb745f55

After the patch:
$ devtool latest-version re2
INFO: Current version: 2024.03.01
INFO: Latest version: 2025-11-05
INFO: Latest version's commit: 927f5d53caf8111721e734cf24724686bb745f55

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-11-20 19:32:09 -08:00
Khem Raj
5bcd67a255
python3-google-auth: Skip mTLS tests from ptests
They need a cert infrastructure to execute.
Mutual TLS authentication requires client/server certificates
and a proper PKI setup that doesn't exist in the minimal qemu ptest
environment. These are integration tests that need real
certificate infrastructure.

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-11-20 18:10:36 -08:00
Khem Raj
13b7798656
python3-google-auth-oauthlib: Upgrade to 1.2.3
Skip a failing ptest

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-11-20 14:54:55 -08:00
Leon Anavi
eb6fce8545
python3-pillow: Upgrade 11.3.0 -> 12.0.0
Upgrade to release 12.0.0:

- Fix issue with forward references in parent TypedDict classes
- Exclude fields with exclude_if from JSON Schema required fields
- Revert URL percent-encoding of credentials in the build() method
  of the AnyUrl and Dsn types
- Add type inference for IP address types
- Avoid getting default values from defaultdict
- Fix issue with field serializers on nested typed dictionaries

This work was sponsored by GOVCERT.LU.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-11-20 10:30:33 -08:00
Leon Anavi
af4866a429
python3-pydantic: Upgrade 2.12.0 -> 2.12.4
Upgrade to release python3-pydantic:

- Fix issue with forward references in parent TypedDict classes
- Exclude fields with exclude_if from JSON Schema required fields
- Revert URL percent-encoding of credentials in the build() method
  of the AnyUrl and Dsn types
- Add type inference for IP address types
- Avoid getting default values from defaultdict
- Fix issue with field serializers on nested typed dictionaries
- Add more pydantic-core builds for the three-threaded version of
  Python 3.14

This work was sponsored by GOVCERT.LU

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-11-20 10:30:33 -08:00
Leon Anavi
80d071ba7e
python3-pydantic-core: Upgrade 2.41.1 -> 2.41.5
Upgrade to release 2.41.5:

- Correct invalid serialization of date/datetime/time/timedelta
  by pulling downcast checks up
- Avoid getting default values from defaultdict
- ci: add more 3.14t builds, delete duplicate linux aarch64 build
- JsonValue: Deduplicate keys before populating Dict
- Fix: only percent-encode characters in the userinfo encode set
- Bump jiter from 0.11.0 to 0.11.1
- Bump regex from 1.11.3 to 1.12.2
- Bump percent-encoding from 2.3.1 to 2.3.2
- Fix issue with field_serializers on nested typed dicts
- Clean up GC traversal for some top-level types
- Add type inference for serializing ip address types
- Revert url credential encoding (to be reintroduced as an option
  in future)
- optimizations in URL implementation

This work was sponsored by GOVCERT.LU.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-11-20 10:30:33 -08:00
Yi Zhao
2fa9680861
vsomeip: upgrade 3.5.10 -> 3.5.11
ChangeLog:
https://github.com/COVESA/vsomeip/releases/tag/3.5.11

* Refresh local patches
* Fix build with boost 1.89

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-11-20 08:37:05 -08:00
Leon Anavi
374b784b22
exiftool: Upgrade 12.89 -> 13.42
Upgrade to release 13.42:

  - Added warning if tag arguments come before -csv= or -json= in
    a command
  - Added a new CanonModelID and RFLensType (thanks Norbert Wasser)
  - Added ability to read XML as a block from Sony MP4 videos
  - Added "EOS" to the R5 Mark II CanonModelID string
  - Decode ReEditData in Samsung trailer
  - Decode a couple more Sony rtmd tags from MP4 videos
  - Tolerate some types of trailer corruption as caused by Samsung
    Gallery
  - Restrict decoding of MetaImageSize to HEIC files only
  - Fixed issue writing Keys tags to Sony PMW-EX1R videos
  - Fixed behaviour of CSV/JSON import when specifying tags to import
    into an existing list, or when importing ValueConv values (ie.
    "TAG#"), or when specifying a group name of "All"

This work was sponsored by GOVCERT.LU.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-11-20 02:01:30 -08:00