10 Commits

Author SHA1 Message Date
Bernd Kuhls
e8c8bd9bc5 package/{rust, rust-bin}: bump version to 1.97.0
https://blog.rust-lang.org/2026/07/09/Rust-1.97.0/

Rust received a change in Cargo's vendoring logic which produces
different vendor directory contents:

  Add $comment to .cargo-checksum.json to clarify this file is not
  a security mechanism.
  https://github.com/rust-lang/cargo/pull/16967

Therefore the hashes of all Cargo-fetched packages need to be
updated. This commit changes the suffix of Cargo packages from
-cargo5 to -cargo6, and updates all hashes.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-07-13 13:04:42 +02:00
Nicolas Serafini
f1f96c1ad0 package/rust: security bump version to 1.94.1
Note: version 1.94.1 includes security fixes for:
https://www.cve.org/CVERecord?id=CVE-2026-33055
https://www.cve.org/CVERecord?id=CVE-2026-33056

For full change logs, see:
https://blog.rust-lang.org/2026/03/26/1.94.1-release/
https://blog.rust-lang.org/2026/03/05/Rust-1.94.0/
https://blog.rust-lang.org/2026/02/12/Rust-1.93.1/
https://blog.rust-lang.org/2026/01/22/Rust-1.93.0/
https://blog.rust-lang.org/2025/12/11/Rust-1.92.0/
https://blog.rust-lang.org/2025/11/10/Rust-1.91.1/
https://blog.rust-lang.org/2025/10/30/Rust-1.91.0/
https://blog.rust-lang.org/2025/09/18/Rust-1.90.0/
https://blog.rust-lang.org/2025/08/07/Rust-1.89.0/

Since Rust 1.89.0, the bootstrap was redesigned (upstream PR #119899):
the stage 0 standard library is no longer built from source but copied
from the stage 0 compiler's sysroot. This breaks host-rust in two
ways.
https://blog.rust-lang.org/inside-rust/2025/05/29/redesigning-the-initial-bootstrap-sequence/
https://github.com/rust-lang/rust/pull/119899

First, building std from source for a cross target at stage 0 now
requires build.local-rebuild to be set in config.toml. Without it,
the bootstrap refuses to proceed. Set local-rebuild = true since the
stage 0 compiler (host-rust-bin) is the same version as the compiler
being built from source.
https://github.com/rust-lang/rust/pull/145876

Second, host-rust-bin creates relative symlinks to expose the host
std libraries under its rustc component directory. The bootstrap's
copy_link_internal() copies these symlinks verbatim into the
stage0-sysroot, where the relative paths no longer resolve. Replace
them with hardlink copies (cp -al) in HOST_RUST_BIN_LIBSTD_EXTRACT.

Also, Rust received three changes in Cargo's vendoring logic which
produces different vendor directory contents.

In Rust version 1.89:

- cargo vendor now does direct extraction from .crate tarballs
  instead of heuristic file listing, adding previously excluded
  files like .cargo_vcs_info.json and hidden directories:
  https://github.com/rust-lang/cargo/pull/15514

- Files with .rej/.orig suffixes (e.g. Cargo.toml.orig) are no
  longer excluded from vendoring:
  https://github.com/rust-lang/cargo/pull/15569

In Rust version 1.94

- Git-specific files (.gitattributes, .gitignore) are now
  recursively filtered in subdirectories, not just at the top
  level:
  https://github.com/rust-lang/cargo/pull/16439

Therefore the hashes of all Cargo-fetched packages need to be
updated. This commit changes the suffix of Cargo packages from
-cargo4 to -cargo5, and updates all hashes.

Signed-off-by: Nicolas Serafini <nicolas.serafini@flyability.com>
Tested-by: Marcus Hoffmann <buildroot@bubu1.eu>
[Julien:
 - mark commit as "security" and add info in commit log
 - squash version bump, bootstrap and hash fixes in a single commit
 - fix python-cryptography hash after update in commit 632e224184
]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-04-13 21:16:49 +02:00
El Mehdi YOUNES
aa6b9c979d package/dust: bump version to 1.2.3
Last time dust was updated, we could not go beyond 1.1.2 since
1.2.0 requires Rust edition 2024. Now that Rust 1.88 is available,
this condition is satisfied and we can bump to 1.2.3.

Release:
https://github.com/bootandy/dust/releases/tag/v1.2.3

Signed-off-by: El Mehdi YOUNES <elmehdi.younes@smile.fr>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-09-04 21:32:12 +02:00
Thomas Petazzoni
e0beecec56 package: update cargo suffix to -cargo4 and fix hashes
Following the "support/download: replace deprecated .cargo/config"
change, the hashes of all Cargo-fetched packages need to be
updated. This commit therefore changes the suffix of Cargo packages
from -cargo3 to -cargo4, and updates all hashes.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Arnout Vandecappelle <arnout@rnout.be>
2025-05-16 20:00:37 +02:00
El Mehdi YOUNES
3615b2cd04 package: update all hashes after cargo3 switch
This updates all SHA256 hashes for Rust packages that previously used
cargo2.tar.gz archives, following the switch to cargo3 naming in my last
patch.

Signed-off-by: El Mehdi YOUNES <elmehdi.younes@smile.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2025-05-16 13:26:33 +02:00
El Mehdi YOUNES
3abc3b97ba package/dust: bump to version 1.1.2
Release:
https://github.com/bootandy/dust/releases/tag/v1.1.2

Note: version 0.9.0 of dust fails to build when running
the runtime test on the armv7 architecture due to an
unconditional import of Atomicu64.

	error:

Compiling config-file v0.2.3
error[E0432]: unresolved import `std::sync::atomic::AtomicU64`
 --> src/progress.rs:6:18
  |
6 |         atomic::{AtomicU64, AtomicU8, AtomicUsize, Ordering},
  |                  ^^^^^^^^^
  |                  |
  |                  no `AtomicU64` in `sync::atomic`
  |                  help: a similar name exists in the module: `AtomicU32`

For more information about this error, try `rustc --explain E0432`.
error: could not compile `du-dust` (bin "dust") due to 1 previous error

This issue was discovered while writing a runtime test
for dust. upgrading to version 1.1.2 resolves the issue.

More details available in the following issue:
https://github.com/bootandy/dust/issues/423

For now, we bump to the latest compatible version
which builds and runs correctly. We can't bump to the latest
version 1.2.0 since it requires a cargo version newer than
1.82.0.

	error:
--  The package requires the Cargo feature called `edition2024`, but that feature is not stabilized in this version of Cargo (1.82.0 (8f40fc59f 2024-08-21)).
  Consider trying a newer version of Cargo (this may require the nightly release).

The upgrade to 1.2.0 will be considered once the patch for
Rust 1.86.0 is accepted.

Signed-off-by: El Mehdi YOUNES <elmehdi.younes@smile.fr>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-04-23 21:25:41 +02:00
Thomas Petazzoni
1dace793ba package: fix filename/hashes of Cargo-fetched packages
Commit de5ed80212 ("{boot, package}:
update hashes for generated archives") forgot to update the filename
and hashes of Cargo-fetched packages.

This commit therefore updates the incorrect filenames and hashes. It
allows to run:

make bat-legal-info \
     dust-legal-info \
     eza-legal-info \
     hyperfine-legal-info \
     nushell-legal-info \
     procs-legal-info \
     ripgrep-legal-info \
     host-rust-bindgen-legal-info \
     host-sentry-cli-legal-info \
     tealdeer-legal-info

successfully.

Also fixes:

  http://autobuild.buildroot.net/results/1ff5ccf5ee6029669af1413c95827f670ae212b3/ (dust)
  http://autobuild.buildroot.net/results/f887adebe611f0021d5ee85acb95cced7c8b71c0/ (sentry-cli)
  http://autobuild.buildroot.net/results/b95093c618eafeb3726513a3ef6199488406093d/ (bat)
  (and probably some other similar issues)

Cc: Yann E. MORIN <yann.morin.1998@free.fr>
Cc: Arnout Vandecappelle <arnout@mind.be>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2024-05-14 17:33:17 +02:00
Yann E. MORIN
d8000791e3 {boot, package}: update hashes of git, svn, go, and cargo archives
Replace all git and svn packages archive names in hash files:

    $ sed -r -i -e 's/-br2/-git3/; s/-br3/-svn4/' $(
        git grep -l -E -- '-br2|-br3' '*.hash'
    )

    $ sed -r -i -e 's/(\.tar\.gz)$/-go1\1/' $(
        git grep -l -E '\$\(eval \$\((host-)?golang-package\)\)' '*.mk' \
        |sed -r -e 's/\.mk$/.hash/' \
        |sort -u
    )

    $ sed -r -i -e 's/(\.tar\.gz)$/-cargo1\1/' $(
        git grep -l -E '\$\(eval \$\((host-)?cargo-package\)\)' '*.mk' \
        |sed -r -e 's/\.mk$/.hash/' \
        |sort -u
    )

Then a bit of make source (based on: git diff --name-only), a lot of
sweat, and carefully checking the new archives to verify that only
modes have changed...

Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
2024-05-09 22:45:02 +02:00
Antoine Coutant
8c7118cea4 package/dust: bump version to 0.9.0
The licence have been updated between versions v0.8.3 and v0.8.4.
see:
520c439edc

Signed-off-by: Antoine Coutant <antoine.coutant@smile.fr>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2024-01-23 22:11:55 +01:00
Nicolas Tran
acb02354a1 package/dust: new package
dust is an alternative of the command du from the Linux kernel,
written in Rust. It aims to be more intuitive and visual in order
to give the user a better view of his system's storage capacity.

Signed-off-by: Nicolas Tran <nicolas.tran@smile.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-07-27 16:43:59 +02:00