Commit Graph

36369 Commits

Author SHA1 Message Date
Khem Raj
ec4c278bc9
python3-betamax: Skip ptests accessing network
cassette fixtures are not installed in ptests so skip
test_requests_with_json_body

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-10 08:56:15 -08:00
Khem Raj
a145ddffde
python3-traitlets: Fix ptests fails
Python 3.13 changed how argparse handles % in help strings,
now treating them all as format placeholders

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-10 08:56:15 -08:00
Khem Raj
ea2e124c95
python3-multidict: Add missing dependency on psutils modules for ptests
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-10 08:56:15 -08:00
Khem Raj
848bac20ea
dante: Add _GNU_SOURCE for musl builds
This helps build fixes e.g. cpuset_t definitions etc.
glibc builds have _GNU_SOURCE defined inherently.

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-10 08:56:15 -08:00
Khem Raj
d8e7190fd3
python3-pyzstd: Remove setup.py tweak for lto/clang
This tweak was specific to clang-16, its no longer needed
moreover, setup.py is no longer there in latest 0.19.x
release

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-10 08:56:15 -08:00
Khem Raj
07e4d9797b
ktls-utils: Fix build with musl
CMSG_NXTHDR results in different signed-ness for cmsghdr
on musl.

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-10 08:56:15 -08:00
Khem Raj
d198cdc0d4
frr: Upgrade to 10.5.0
Relase Overview:

* BFD the ability to listen for specific VRFs only
  - Configure which VRFs the BFD daemon will listen to. By default, BFD listens to  all VRFs
    present in the system, including the default VRF. Default VRF must be specified as `default`.

* BGP SRv6/MPLS coexistence
  - Allow MPLS and SRv6 to coexist on the same L3VRF, even for a given prefix. This feature is
    important in brown fields where some operators want to migrate from MPLS to SRv6 backbone.

* BGP SRv6 locator per VRF support
  - Ability to choose SRv6 locator per VRF.

* BGP Error handling (RFC 7606) for iBGP peers
  - Before 10.5.0, once we received a malformed packet between iBGP peers, we always reset the
    session, and with this release, we handle malformed packets the same way as for eBGP
    (by withdrawing or discarding the malformed packets).

* BGP IPv6 Link-Local Capability is disabled by default
  - In 10.4.0, this capability was enabled by default for a “datacenter” profile, but it’s disabled
    for 10.5.0 and will be backported to 10.4.2 as well. The problem arises when the receiver has
    configured a route-map with `set ipv6 next-hop prefer-global` and we send only an IPv6 Link-Local
    address; therefore, it was decided to revert it to be disabled by default.

* BGP BGPID Next-Hop Characteristic
  - In some cases, the BGP speaker sending a route might encode only a link-local address and no
    global address. To provide uniqueness in this case, it is sufficient to associate the BGP
    Identifier and AS Number of the route's sender. The BGP Identifier Characteristic
    (BGPID) provides a way to convey this information if required.

* BGP EVPN flooding per VNI support
  - Add an ability to adjust BUM flooding per VNI, instead of just globally. E.g., disable flooding
    only for an arbitrary VNI.

* BGP RPKI strict mode
  - RPKI strict mode prevents BGP from establishing a session if no RPKI cache server
    is connected.

* BGP rejects AS_SET by default**
  - Until 10.5.0, it was disabled by default, and since RFC 9774 was published, we switched this on
    by default (to reject).

* BGP has lots of improvements for Graceful-Restart**

* PIM/PIMv6 route-map support to allow users to filter IGMP/MLD joins using source, group, and
  interface combinations

* Support for multiple SRv6 locators
  - This extends the SRv6 SID Manager to add support for multiple locators.

* Zebra 16-bit next hop weights support
  - The weights used in ECMP’s consistent hashing have been widened from 8 bits to 16 bits since
    the 6.12 Linux kernel.

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-10 08:56:14 -08:00
Liu Yiding
108e29ca3b
gflags: add tag to SRC_URI
Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-10 08:56:14 -08:00
Khem Raj
0b5f2ba62c
python3-pyzstd: Add ptest dependency on backports.zstd
This module is needed by ptests in 0.19+

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-10 08:56:14 -08:00
Khem Raj
332072205f
python3-backports-zstd: Add recipe
This is required by python3-pyzstd >= 0.19.0
tests

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-10 08:56:14 -08:00
Liu Yiding
e26c6f86c8
python3-pyzstd: upgrade 0.18.0 -> 0.19.0
1. Changelog
  - The project has been completely refactored to use the Zstandard implementation from the standard library ([PEP-784](https://peps.python.org/pep-0784/))
  - The refactor has some minor impact on public APIs, such as changing the exception raised on invalid input

2. Drop 0001-Bump-setuptools-dependency-from-74-to-89.patch as setuptools in requires was removed in pyproject.toml

3. HOMEPAGE has been changed to https://github.com/Rogdham/pyzstd.

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-10 08:56:14 -08:00
Khem Raj
a5bf664a15
ktls-utils: Fix out of tree builds
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-10 08:56:14 -08:00
Khem Raj
1ccdc56c01
ktls-utils: Upgrade to 1.3.0
Drop musl patch as it is fixed upstream [1]

[1] 3b419faa9f

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-10 08:56:13 -08:00
Gyorgy Sarvari
f2b8b47e45
wolfssl: upgrade 5.8.0 -> 5.8.4
License-Update: the project was relicensed from GPL-2 to GPL-3

Inludes fixes for the following vulnerabilities:
CVE-2025-7394, CVE-2025-7395, CVE-2025-7396, CVE-2025-12888, CVE-2025-11936,
CVE-2025-11935, CVE-2025-11934, CVE-2025-11933, CVE-2025-11932, CVE-2025-11931,
CVE-2025-12889

Drop patch that is incorporated in this release.

Changelog: https://github.com/wolfSSL/wolfssl/blob/master/ChangeLog.md

Ptests passed:

START: ptest-runner
2025-12-09T18:23
BEGIN: /usr/lib/wolfssl/ptest
Wolfssl ptest logs are stored in /tmp/wolfss_temp.6rsnys/ptest.log
Test script returned: 0
unit_test: Success for all configured tests.
PASS: Wolfssl
DURATION: 13
END: /usr/lib/wolfssl/ptest
2025-12-09T18:23
STOP: ptest-runner
TOTAL: 1 FAIL: 0

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-10 08:56:13 -08:00
Deepesh Varatharajan
1feb12a4bc
ripgrep: Add ripgrep recipe
ripgrep is a fast, line-oriented search tool written in Rust.
Add recipe for the latest release (15.1.0)

- Recursively searches the current directory using a regex pattern
- Respects .gitignore rules
- Provides first-class support on Linux
- 'rg' is significantly faster than grep

More information: https://crates.io/crates/ripgrep

Upstream Benchmarks:
Task                                 ripgrep               GNU grep               Speedup vs grep
Basic search (Unicode)          536 lines, 0.082s       536 lines, 0.273s       ripgrep ~3.3× faster
Ignoring gitignore files        447 lines, 0.063s       447 lines, 0.674s       ripgrep ~10× faster
Large single file (~13GB)       7882 lines, 1.042s      7882 lines, 6.577s      ripgrep ~6.3× faster

Bechmarks inside qemu (ripgrep built from this recipe):
Tool & Command                      Real Time    User Time    Sys Time    Speedup vs grep
ripgrep (rg "printf" /usr)           0.496 s      0.511 s     0.604 s       3.1× faster
grep (grep -R "printf" /usr)         1.533 s      0.633 s     0.897 s            —

Signed-off-by: Deepesh Varatharajan <Deepesh.Varatharajan@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-10 08:56:13 -08:00
Deepesh Varatharajan
9be6b9680d
fd-find: Add fd-find recipe
fd is a simple, fast and user-friendly alternative to 'find' written in rust.
Add recipe for the latest release (10.3.0)

- Ignores hidden and .gitignore files by default
- Supports regular expressions and highlights matches
- Faster and easier to use than traditional 'find'

More information: https://crates.io/crates/fd-find

Upstream Benchmarks:
Tool & Command                 Time (mean ± σ)          Range (min … max)      Speedup vs find
fd -u '[0-9]\.jpg$' ~        854.8 ms ±  10.0 ms       839.2 ms … 868.9 ms        ~13x faster
find ~ -iname '*[0-9].jpg'   11.226 s ±  0.104 s       11.119 s … 11.466 s            —

Bechmarks inside qemu (fd built from this recipe):
Tool & Command	                  Real Time	 User Time	 Sys Time	 Speedup vs find
fd (fd /path/to/search)	            2.115 s	  2.660 s	  5.083 s          ≈2.1× faster
find (find /path/to/search)         4.401 s	  1.607 s	  2.788 s	        —

Signed-off-by: Deepesh Varatharajan <Deepesh.Varatharajan@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-10 08:56:13 -08:00
Gyorgy Sarvari
62345c309b
dleyna-server: drop recipe
The recipe has been disabled for over two years, due to the application
being an abandonware, and it fails to compile with new versions of its dependencies.

There are no signs from upstream that it would be revived (repository
has been archived 4 years ago).

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-10 08:56:13 -08:00
Gyorgy Sarvari
406f7a8a31
dleyna-renderer: drop recipe
The recipe has been disabled for over two years, due to the application
being an abandonware, and it fails to compile with new versions of its dependencies.

There are no signs from upstream that it would be revived (repository
has been archived 4 years ago).

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-10 08:56:13 -08:00
Gyorgy Sarvari
e6ddc6181f
dleyna-core: drop recipe
The recipe has been disabled for over two years, due to the application
being an abandonware, and it fails to compile with new versions of its dependencies.

There are no signs from upstream that it would be revived (repository
has been archived 4 years ago).

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-10 08:56:12 -08:00
Gyorgy Sarvari
10cb235b58
dleyna-connector-dbus: drop recipe
The recipe has been disabled for over two years, due to the application
being an abandonware, and it fails to compile with new versions of its dependencies.

There are no signs from upstream that it would be revived (repository
has been archived 4 years ago).

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-10 08:56:12 -08:00
Gyorgy Sarvari
b990486203
fex: ignore unrelated CVEs
These CVEs were filed for "Fram's Fast File Exchange" application, which
has the same abbreviated name as fex. Currently this recipe has no historical
CVEs associated, so I couldn't set the correct CVE_PRODUCT. Rather ignore
these irrelevant CVEs explicitly.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-10 08:56:12 -08:00
Gyorgy Sarvari
9f12c5fbc6
dante: upgrade 1.4.3 -> 1.4.4
License-Update: copyright year bump

Changelog:
- Fix potential security issue CVE-2024-54662, related to "socksmethod"
  use in client/hostid-rules.
- Add a missing call to setgroups(2).
- Patch to fix compilation with libminiupnp 2.2.8.
- Client connectchild optimizations.
- Client SIGIO handling improvements.
- Various configure/build fixes.
- Updated to support TCP_EXP1 version of TCP hostid format.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-10 08:56:12 -08:00
Gyorgy Sarvari
056ee43dd1
cups-filters: patch CVE-2025-64524
Details: https://nvd.nist.gov/vuln/detail/CVE-2025-64524

Pick the patch mentioned in the nvd report.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-10 08:56:12 -08:00
Gyorgy Sarvari
bfb76da63b
civetweb: ignore CVE-2025-9648
Details: https://nvd.nist.gov/vuln/detail/CVE-2025-9648

It is already fixed in the currently used version.

Also, update CVE-2025-55763's status to "fixed-version" (so it will be
marked as "Patched" in the CVE report instead of "Ignored")

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-10 08:56:12 -08:00
Gyorgy Sarvari
071a45c9d7
accountservice: ignore CVE-2023-3297
Details: https://nvd.nist.gov/vuln/detail/CVE-2023-3297

The vulnerability is triggered by a patch added by Ubuntu, and the vulnerable patch is
not present in the recipe.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-10 08:56:11 -08:00
Weisser, Pascal
7402203910
libcamera: Add HOMEPAGE variable
Add HOMEPAGE variable to libcamera recipe.

Signed-off-by: Weisser, Pascal <pascal.weisser.ext@karlstorz.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-10 08:56:11 -08:00
Wang Mingyu
ad7c9ad199 nftables: upgrade 1.1.5 -> 1.1.6
0001-fix-typo-in-test-script.patch
removed since it's included in 1.1.6

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-09 15:11:01 -08:00
Wang Mingyu
bf1da6d183 xterm: upgrade 403 -> 404
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-09 15:11:01 -08:00
Wang Mingyu
dfbe08b6c3 usb-modeswitch: upgrade 2.6.1 -> 2.6.2
0001-Fix-build-with-gcc-15.patch
removed since it's included in 2.6.2

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-09 15:11:01 -08:00
Wang Mingyu
8f2c436db5 usb-modeswitch-data: upgrade 20191128 -> 20251207
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-09 15:11:01 -08:00
Wang Mingyu
6578a4f717 syslog-ng: upgrade 4.8.2 -> 4.10.2
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-09 15:11:01 -08:00
Wang Mingyu
82be545c06 smarty: upgrade 5.6.0 -> 5.7.0
Changelog:
 PHP 8.5 support

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-09 15:11:01 -08:00
Wang Mingyu
84ea90031d sip: upgrade 6.14.0 -> 6.15.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-09 15:11:01 -08:00
Wang Mingyu
50c6a66e06 rtorrent: upgrade 0.16.2 -> 0.16.5
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-09 15:11:01 -08:00
Wang Mingyu
9d3138a632 rsyslog: upgrade 8.2510.0 -> 8.2512.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-09 15:11:01 -08:00
Wang Mingyu
632523b914 python3-txaio: upgrade 25.9.2 -> 25.12.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-09 15:11:01 -08:00
Wang Mingyu
fd9bab33e2 python3-pytest-httpx: upgrade 0.35.0 -> 0.36.0
License-Update: Copyright year updated to 2025

Changelog:
===========
- pytest required version is now 9.
- Explicit support for python 3.14.
- match_params parameter is now available on responses and callbacks
  registration, as well as request(s) retrieval. Allowing to provide query
  parameters as a dict instead of being part of the matched URL.
- This parameter allows to perform partial query params matching (refer to
  documentation for more information).
- URL with more than one value for the same parameter were not matched properly
  (matching was performed on the first value).
- httpx_mock.add_exception is now properly documented (accepts BaseException
  instead of Exception).
- pytest 8 is not supported anymore.
- python 3.9 is not supported anymore.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-09 15:11:01 -08:00
Wang Mingyu
3f13fbc5c2 python3-pymongo: upgrade 4.15.4 -> 4.15.5
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-09 15:11:01 -08:00
Wang Mingyu
7ea6be4b5a python3-pybase64: upgrade 1.4.2 -> 1.4.3
Changelog:
==========
- Publish Android Python 3.14 wheels
- Publish GraalPy v25 wheels

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-09 15:11:01 -08:00
Wang Mingyu
f0f0092cbd python3-pyais: upgrade 2.13.3 -> 2.14.0
Changelog:
============
* Fix: Message Type 24 Part B: Detecting MMSI as auxiliary
* add support for AIS Message Type 24 Part B auxiliary craft variant
* auxiliary craft now decode mothership MMSI instead of vessel dimensions

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-09 15:11:01 -08:00
Wang Mingyu
5a4e79b63b python3-psycopg: upgrade 3.2.13 -> 3.3.2
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-09 15:11:01 -08:00
Wang Mingyu
4ae28f24fd python3-platformdirs: upgrade 4.5.0 -> 4.5.1
Changelog:
  Fix no-ctypes fallback on windows

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-09 15:11:01 -08:00
Wang Mingyu
3933501591 python3-marshmallow: upgrade 4.1.0 -> 4.1.1
Bug fix:
  Ensure URL validator is case-insensitive when using custom schemes

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-09 15:11:01 -08:00
Wang Mingyu
95f21ffa95 python3-ipython: upgrade 9.7.0 -> 9.8.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-09 15:11:01 -08:00
Wang Mingyu
3af05cab17 python3-greenlet: upgrade 3.2.4 -> 3.3.0
Changelog:
==========
- Drop support for Python 3.9.
- Switch to distributing manylinux_2_28 wheels instead of manylinux2014
  wheels. Likewise, switch from musllinux_1_1 to 1_2.
- Add initial support for free-threaded builds of CPython 3.14.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-09 15:11:01 -08:00
Wang Mingyu
8de88b0308 python3-fastapi: upgrade 0.122.0 -> 0.124.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-09 15:11:01 -08:00
Wang Mingyu
078c62af8c python3-cmd2: upgrade 2.7.0 -> 3.0.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-09 15:11:01 -08:00
Wang Mingyu
e00835c994 python3-cantools: upgrade 41.0.0 -> 41.0.2
Changelog:
==========
- Add support for INT VFrameFormat
- Check ./tests directory with ruff

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-09 15:11:01 -08:00
Wang Mingyu
4006ec486b python3-argcomplete: upgrade 3.6.2 -> 3.6.3
Changelog:
============
- Make RE PCRE compatible.
- Only execute Python interpreters
- fish: set variable scope to local to avoid clobbering global or universal variables
- Documentation and help improvements

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-09 15:11:00 -08:00
Wang Mingyu
22dc38bdcc python3-aiodns: upgrade 3.5.0 -> 3.6.0
Changelog:
=============
- Fix resolver garbage collection during pending queries (#211)
  - Prevents resolver from being garbage collected while queries are in progress
- Socket callback optimizations (#172)
  - Improved performance for socket state handling
- Fixed RTD links (#176)
- Added Python 3.14 to the CI (#212)
- Updated dependencies- Fix resolver garbage collection during pending queries (#211)
  - Prevents resolver from being garbage collected while queries are in progress
- Socket callback optimizations (#172)
  - Improved performance for socket state handling
- Fixed RTD links (#176)
- Added Python 3.14 to the CI (#212)
- Updated dependencies

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-09 15:11:00 -08:00