Commit Graph

78015 Commits

Author SHA1 Message Date
Yann E. MORIN
34e4480950 support/testing: add a crun-based runtime test for docker-compose
Via the docker-compose runtime test, we can exercise the full suite of
the docker-related packages: docker-compose, of course, but also
docker-engine, which in turn allows exercising containerd. The latter
by defualt uses runc as the container runtime, but can alternatively use
crun.

Extend the docker-compose runtime test with a variant that enables crun.

Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-07-15 23:50:31 +02:00
Yann E. MORIN
ed99b77e5d package/passt: needs headers >= 5.0
Upstream passt only documents runtime dependencies; and they advertise
being able to run on kernel 3.8 or later. However, they do not document
the build dependencies.

As reported by Julien, since 2024_12_11.09478d5, upstream requires
kernel headers >= 5.0, as they make use of linux/vhost_types.h, only
introduced in 5.0.

Add a dependency to kernel headers, and propagate it to podman's passt
backend.

Reported-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Yann E. MORIN <yann.morin@orange.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-07-15 21:13:52 +02:00
Marcus Hoffmann
b17a5979c3 package/python-starlette: bump to 0.47.1
Release notes:
* https://github.com/encode/starlette/releases/tag/0.47.0
* https://github.com/encode/starlette/releases/tag/0.47.1

Signed-off-by: Marcus Hoffmann <buildroot@bubu1.eu>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-07-14 19:32:02 +02:00
Marcus Hoffmann
25d8e7f1a0 package/python-fastapi: bump to 0.116.1
Release notes:
* https://github.com/fastapi/fastapi/releases/tag/0.116.0
* https://github.com/fastapi/fastapi/releases/tag/0.116.1

Signed-off-by: Marcus Hoffmann <buildroot@bubu1.eu>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-07-14 19:31:58 +02:00
Marcus Hoffmann
529bbd861a package/python-pyproject-metadata: bump to version 0.9.1
Release notes:
https://github.com/pypa/pyproject-metadata/releases/tag/0.9.1

Signed-off-by: Marcus Hoffmann <buildroot@bubu1.eu>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-07-14 19:25:13 +02:00
Marcus Hoffmann
b67ca753c9 package/python-flit-core: bump to 3.12
Release notes:
https://flit.pypa.io/en/stable/history.html#version-3-12

Signed-off-by: Marcus Hoffmann <buildroot@bubu1.eu>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-07-14 15:29:28 +02:00
Scott Fan
6c80b71c8c package/chrony: bump to version 4.7
Release notes: https://chrony-project.org/news.html

Since this release, building without POSIX threads is no longer supported.
So add a depends on BR2_TOOLCHAIN_HAS_THREADS.

Signed-off-by: Scott Fan <fancp2007@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-07-14 15:18:08 +02:00
Thomas Perale
84077c7776 package/libesmtp: bump to version v1.1.0-14-g335ee8d to fix build with gcc-14
When building libesmtp on the autobuilder with gcc-14, the
following error occurs:

    /workdir/instance-0/output-1/per-package/libesmtp/host/bin/arc-linux-gcc -Ilibesmtp.so.6.2.0.p -I. -I.. -I/workdir/instance-0/output-1/per-package/libesmtp/host/arc-buildroot-linux-gnu/sysroot/usr/include -fdiagnostics-color=always -Wall -Winvalid-pch -std=c11 -O3 -D_POSIX_C_SOURCE=200809L -D_LARGEFILE_SOURCE -D_LARGEFILE64_SOURCE -D_FILE_OFFSET_BITS=64 -Os -g0 -D_FORTIFY_SOURCE=2 -fPIC -pthread -MD -MQ libesmtp.so.6.2.0.p/smtp-api.c.o -MF libesmtp.so.6.2.0.p/smtp-api.c.o.d -o libesmtp.so.6.2.0.p/smtp-api.c.o -c ../smtp-api.c
    ../smtp-api.c: In function 'smtp_version':
    ../smtp-api.c:1183:7: error: implicit declaration of function 'strlcpy'; did you mean 'strncpy'? [-Wimplicit-function-declaration]
     1183 |   if (strlcpy (buf, v, len) > len)
          |       ^~~~~~~
          |       strncpy

This error has been fixed upstream in commit [1], but no new release
has been made since.
This patch update the package version to fetch the latest upstream
commit v1.1.0-14-g335ee8d.

For the changes, see:

 - https://github.com/libesmtp/libESMTP/compare/v1.1.0...335ee8d2fa5cb7d30db7b818ec05563ad139ee2f

[1] 972eb54749

Fixes: https://autobuild.buildroot.org/results/ced/ceda012506edccda1727904eb3327017b07e27d8
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
[Julien:
 - mention gcc-14 as the root cause of the build failure
 - use "git describe --tags --abbrev=40" format in _VERSION
]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-07-14 12:34:58 +02:00
Fiona Klute
41258a8194 package/eudev: refactor init script and rename it to S10udevd
This brings the script in line with current init script standards, and
fixes all make check-package warnings. Other notable changes:

* Use start-stop-daemon to create a PID file, so we can monitor shutdown.

* Use "udevadm control --exit" to implement stop, instead of "killall".

* Do not require /etc/udev/udev.conf to exist, the default contains
  only comments and udevd works without.

* Do not parse /etc/udev/udev.conf, the udev_root configuration option
  it was used for has been removed in version 1.5.1 [1].

* Implement reload using udevadm.

[1] 6ada823a9a

Signed-off-by: Fiona Klute <fiona.klute@gmx.de>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-07-14 11:48:31 +02:00
Fiona Klute
abdc96eaf8 package/eudev: install hwdb.bin to libexecdir
The hwdb sources are always deleted from the rootfs image (see commit
07aa585aa6), so the resulting hwdb.bin
is installed package data, not user configuration. The name of the
"--usr" flag to "udevadm hwdb" may be confusing, but it chooses the
libexecdir location, whether that is in /usr or not.

Eudev checks both locations and prefers the one in /etc if it exists,
so overriding the configuration in an installed system is possible as
before, with the advantage that /etc/udev/hwdb.bin (if any) can be
deleted to restore defaults.

Signed-off-by: Fiona Klute <fiona.klute@gmx.de>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-07-14 11:48:27 +02:00
Fiona Klute
993c0ba460 package/eudev: remove obsolete --disable-introspection configure flag
It was removed from eudev with version 1.5.1, when introspection
became part of the gudev option [1]. This has in turn been removed and
replaced by package/libgudev, yet somehow the flag stayed. Remove it
to remove a warning during configure stage.

[1] d5d6a7f304

Signed-off-by: Fiona Klute <fiona.klute@gmx.de>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-07-14 11:48:10 +02:00
Marcus Hoffmann
8d1d851d78 package/python-typing-extensions: update description
Minimum python version is now 3.9, but also it's not really relevant to
mention this in the package description.

Signed-off-by: Marcus Hoffmann <buildroot@bubu1.eu>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-07-14 11:18:22 +02:00
Marcus Hoffmann
9189e74ef8 package/python-typing-extensions: bump to 4.14.1
Changes: https://github.com/python/typing_extensions/releases/tag/4.14.1

Signed-off-by: Marcus Hoffmann <buildroot@bubu1.eu>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-07-14 11:18:18 +02:00
Marcin Niestroj
557692a05f package/python-typing-extensions: bump to 4.14.0
See [1] for changelog.

[1] https://github.com/python/typing_extensions/blob/main/CHANGELOG.md#release-4140-june-2-2025

Signed-off-by: Marcin Niestroj <m.niestroj@grinn-global.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-07-13 17:35:45 +02:00
Marcin Niestroj
3721a73a89 package/python-pytest-asyncio: bump to 1.0.0
See [1] for changelog.

[1] https://github.com/pytest-dev/pytest-asyncio/blob/main/docs/reference/changelog.rst#100---2025-05-26

Signed-off-by: Marcin Niestroj <m.niestroj@grinn-global.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-07-13 17:30:19 +02:00
Marcin Niestroj
e5baa5ed13 package/python-pytest: bump to 8.4.0
See [1] for changelog.

[1] https://github.com/pytest-dev/pytest/blob/main/doc/en/changelog.rst#pytest-840-2025-06-02

Signed-off-by: Marcin Niestroj <m.niestroj@grinn-global.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-07-13 17:30:06 +02:00
Marcin Niestroj
cccf9b9e5a package/python-pluggy: bump to 1.6.0
See [1] for changelog.

[1] https://github.com/pytest-dev/pluggy/blob/main/CHANGELOG.rst#pluggy-160-2025-05-15

Signed-off-by: Marcin Niestroj <m.niestroj@grinn-global.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-07-13 17:25:40 +02:00
Marcin Niestroj
655300a1be package/python-packaging: bump to 25.0
See [1] for changelog.

[1] https://github.com/pypa/packaging/blob/main/CHANGELOG.rst#250---2025-04-19

Signed-off-by: Marcin Niestroj <m.niestroj@grinn-global.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-07-13 17:18:07 +02:00
Bernd Kuhls
068ed20ba9 package/llvm-project: bump to version 20.1.8
Release notes:
https://discourse.llvm.org/t/llvm-20-1-8-released/87259

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-07-13 15:50:45 +02:00
Florian Larysch
df7e428cf5 fs: erofs: reword "all-fragments" Kconfig text
Currently, both BR2_TARGET_ROOTFS_EROFS_ALL_FRAGMENTS and
BR2_TARGET_ROOTFS_EROFS_FRAGMENTS have the same Kconfig prompt, making
them hard to distinguish.

Reword the one for -Eall-fragments to be distinct.

Signed-off-by: Florian Larysch <fl@n621.de>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-07-13 15:46:23 +02:00
Francois Perrad
d79bbd48eb package/luarocks: bump to version 3.12.2
For change log, see:
https://github.com/luarocks/luarocks/blob/v3.12.2/CHANGELOG.md

Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
[Julien: add link to change log]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-07-13 15:32:13 +02:00
Andreas Ziegler
ec477e7966 package/libmpdclient: update version to 2.23
Version 2.23 change log:

* support MPD protocol 0.24.0
  - allow window for listplaylist and listplaylistinfo
  - command "playlistlength", "protocol", "stickertypes",
            "stickernamestypes", "searchplaylist"
  - tag "ShowMovement"
  - new sticker find api
  - new subcommands for "tagtypes": "available", "reset"
* Support open end for mpd_search_add_window
* format floating-point numbers with the POSIX localew

Signed-off-by: Andreas Ziegler <br015@umbiko.net>
Tested-by: Andreas Ziegler <br015@umbiko.net>
[Julien: update signature link in hash file]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-07-13 13:36:28 +02:00
Bernd Kuhls
c61d7d61b1 package/libcrossguid: bump version to v0.2.2-52-gca1bf4b
Needed for kodi 22.x.

Added build fix for >= gcc-13.

Switched build system to cmake following upstream:
13683c56e5

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
[Julien: use "git describe --tags --abbrev=40" format for _VERSION]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-07-13 13:25:15 +02:00
Bernd Kuhls
68751909a9 package/freeswitch: fix build with ffmpeg-7.x
This patch replaces the previous patch allowing to build with ffmpeg 6.x
with a patch which also allows to build with ffmpeg 7.x.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-07-13 13:06:53 +02:00
Bernd Kuhls
aa187f62d6 package/minidlna: Fix build with ffmpeg-7.0
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-07-13 13:00:51 +02:00
Bernd Kuhls
9135a8a5aa package/squeezelite: bump version
Update license hash due to various copyright year bumps:
https://github.com/ralph-irving/squeezelite/commits/master/LICENSE.txt

This version bump is needed for compatibility with the upcoming bump of
ffmpeg to version 7.1.x.

For change list, see:
71c012ad9b...72e1fd8abf

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
[Julien: add link to change list]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-07-13 12:48:01 +02:00
Julien Olivain
565ee4a917 package/openblas: bump to version v0.3.30
For change log since v0.3.29, see:
https://github.com/OpenMathLib/OpenBLAS/releases/tag/v0.3.30

Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-07-13 12:39:47 +02:00
Tim Soubry
bb1a568945 package/libxml2: add patch for CVE-2025-49795
This patch mitigates CVE-2025-49795 [1] by backporting the commit [2] to
libxml2 2.13.

[1] https://nvd.nist.gov/vuln/detail/cve-2025-49795
[2] 499bcb78ab
[3] https://security-tracker.debian.org/tracker/CVE-2025-49795

Signed-off-by: Tim Soubry <tim.soubry@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-07-12 23:48:02 +02:00
Tim Soubry
0df4585100 package/libxml2: add patch for CVE-2025-49794 & CVE-2025-49796
This patch fixes CVE-2025-49794 [1] and CVE-2025-49796 [2] by
backporting the commit from [3] to libxml2 2.13.

[1] https://nvd.nist.gov/vuln/detail/cve-2025-49794
[2] https://nvd.nist.gov/vuln/detail/cve-2025-49796
[3] 71e1e8af5e

Signed-off-by: Tim Soubry <tim.soubry@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-07-12 23:47:58 +02:00
Tim Soubry
a1cf6bcc06 package/libxml2: add patch for CVE-2025-6021
This fixes an integer overflow vulnerability [1], in libxml2 version
2.13 by backporting the commit [2] from libxml2 2.14. This commit uses
the SIZE_MAX macro, for which stdint.h was included in tree.c, as done in [3].

[1] https://nvd.nist.gov/vuln/detail/CVE-2025-6021
[2] ad346c9a24
[3] https://git.openembedded.org/openembedded-core/tree/meta/recipes-core/libxml/libxml2/CVE-2025-6021.patch

Signed-off-by: Tim Soubry <tim.soubry@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-07-12 23:47:53 +02:00
Thomas Perale
cd6f2b465b package/libargtable2: fix build error with gcc-14
The following build error is happening on the autobuilder:

```
arg_int.c:60:12: error: implicit declaration of function 'isspace' [-Wimplicit-function-declaration]
   60 |     while (isspace(*ptr))
      |            ^~~~~~~
arg_int.c:33:1: note: include '<ctype.h>' or provide a declaration of 'isspace'
   32 | #include <limits.h>
  +++ |+#include <ctype.h>
   33 |
arg_int.c:89:8: error: implicit declaration of function 'toupper' [-Wimplicit-function-declaration]
   89 |    if (toupper(*ptr++)!=toupper(X))
      |        ^~~~~~~
arg_int.c:89:8: note: include '<ctype.h>' or provide a declaration of 'toupper'
```

Both `isspace` and `toupper` are declared in the `ctype.h` header.
This build error started to happen with gcc-14.
The `ctype.h` include was added in a later upstream commit.
This patch adds that upstream commit and strip everything else to only
patch that include.

Fixes: https://autobuild.buildroot.org/results/d38/d38e3e12f52c3fde08ab446ca14a1a7bd65c9469//
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
[Julien: add comment about gcc-14]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-07-12 23:31:48 +02:00
Yegor Yefremov
d31694a8ef package/python-tornado: bump to version 6.5.1
For change log, see:

https://github.com/tornadoweb/tornado/releases/tag/v6.5.1

Drop an already upstreamed patch.

Signed-off-by: Yegor Yefremov <yegorslists@googlemail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-07-12 22:21:58 +02:00
Bernd Kuhls
282e7add88 package/samba4: bump version to 4.22.3
Release notes:
https://www.samba.org/samba/history/samba-4.22.3.html

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-07-12 17:48:42 +02:00
Torben Voltmer
5716cb7c44 package/espflash: bump to version 4.0.1
Release notes:
https://github.com/esp-rs/espflash/releases/tag/v4.0.1

This commit updates license file hashes after year update
in upstream commit:
3c56608a8a

Signed-off-by: Torben Voltmer <mail@t-voltmer.net>
[Julien: update license file hashes]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-07-12 17:44:38 +02:00
Jesse Taube
051d145137 configs/imxrt1050-evk: bump U-Boot and switch to use extlinux.conf
Switch to extlinux instead of built in U-Boot script.
Drop custom U-Boot fragment and genimage config.
Update U-Boot from 2024.01 to 2025.07. This new U-Boot now
requires BR2_TARGET_UBOOT_NEEDS_PYLIBFDT=y in the defconfig.

Signed-off-by: Jesse Taube <Mr.Bossman075@gmail.com>
Reviewed-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
[Julien:
 - mention U-Boot bump in commit log
 - add BR2_TARGET_UBOOT_NEEDS_PYLIBFDT=y
]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-07-12 17:24:49 +02:00
Adrian Perez de Castro
8f427b78a9 package/libdex: bump to version 0.10.1
This is a bugfix release which includes a few improvements and fixes
leaks of Unix signal futures. Release notes:

  https://gitlab.gnome.org/GNOME/libdex/-/blob/0.10.1/NEWS

Signed-off-by: Adrian Perez de Castro <aperez@igalia.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-07-12 13:36:57 +02:00
Adrian Perez de Castro
8b0bb89640 package/wpebackend-fdo: bump to version 1.16.0
This maintenance release solves build issues and memory leaks.
Release notes:

  https://wpewebkit.org/release/wpebackend-fdo-1.16.0.html
  https://wpewebkit.org/release/wpebackend-fdo-1.14.4.html

Signed-off-by: Adrian Perez de Castro <aperez@igalia.com>
[Julien: add link to 1.14.4 release note]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-07-12 13:25:31 +02:00
Adrian Perez de Castro
b4ce212da1 package/libmanette: bump to version 0.2.12
Bugfix release, mainly adds dead zone for the Steam Deck analog sticks.
Release notes:

  https://gitlab.gnome.org/GNOME/libmanette/-/blob/0.2.12/NEWS

Signed-off-by: Adrian Perez de Castro <aperez@igalia.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-07-12 13:15:00 +02:00
Tim Soubry
793c5ad89d package/ncmpc: bump version to 0.52
Applying version bump of ncmpc to version 0.52 as proposed in [1].
As from version 0.50 of ncmpc, fmt got added as a dependency [2]. This was
also added to package/ncmpc/Config.in and package/ncmpc/ncmpc.mk.

For release notes, see:
https://github.com/MusicPlayerDaemon/ncmpc/blob/v0.52/NEWS

Comparision between version 0.49 and 0.52:
https://github.com/MusicPlayerDaemon/ncmpc/compare/v0.49..v0.52

[1] https://lore.kernel.org/buildroot/20250707112536.1644236-1-tim.soubry@mind.be/T/#rb3b968fff23bac0298e33f473d63a1ad470d38e3
[2] c3b0055d06

Signed-off-by: Tim Soubry <tim.soubry@mind.be>
Tested-by: Andreas Ziegler <br015@umbiko.net>
[Julien: change release note link to use tag]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-07-12 13:06:38 +02:00
Florian Larysch
e44aff6b1b package/ffmpeg: add support for pulseaudio
Signed-off-by: Florian Larysch <fl@n621.de>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-07-12 12:47:26 +02:00
Jiaxun Yang
9431681402 arch/loongarch: Fix minimal GCC version for target arch options
As reported by Thomas in [1], autobuilders reported host-gcc-initial
failures at configure time, with message:

    Unknown arch in --with-arch=la64v1.0

Both la64v1.0 and la64v1.1 requires GCC 14 as minimum, introduced in
upstream commit [2].

[1] https://lore.kernel.org/buildroot/20250709225522.0a12e583@windsurf/
[2] https://gcc.gnu.org/git/?p=gcc.git;a=commit;h=b4ebdd153b2b068082b452772095260b03b78cc2

Fixes: https://autobuild.buildroot.org/results/04a904f08d6e0aacbd308692c99e77a334d72b95/
Signed-off-by: Jiaxun Yang <jiaxun.yang@flygoat.com>
[Julien:
 - add links to mailing list and upstream commit
 - remove unrelated comment change to previous commit
]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-07-12 12:40:13 +02:00
Jiaxun Yang
8b999bdf18 arch/loongarch: Fix toolchain triple ABI suffix
LoongArch GCC infers ABI from triple suffix, thus it's necesessary
to set up proper triple ABI suffixes for different ABI types.
See [1].

Adjust ABI suffix as per Table 10. List of possible <fabi-suffix>
in "LoongArch Toolchain Conventions Version 1.00" [2].

[1] https://gcc.gnu.org/git/?p=gcc.git;a=blob;f=gcc/config.gcc;h=a6f6efec4e103301225ef74c2d1159933d1c9cf8;hb=1757c320badc92c0628eafcd07d54585659692ed#l5102
[2] https://loongson.github.io/LoongArch-Documentation/LoongArch-toolchain-conventions-EN.html#_gnu_target_triplets_and_multiarch_specifiers

Link: https://lore.kernel.org/all/20250706105859.292908-1-ju.o@free.fr/
Suggested-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Jiaxun Yang <jiaxun.yang@flygoat.com>
[Julien:
 - add link to gcc sources infering ABI
 - update loongarch doc link to point to triplet section
]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-07-12 12:40:13 +02:00
Bernd Kuhls
e7a175355b {linux, linux-headers}: bump 5.15.x / 6.{1, 6, 12, 15}.x series
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-07-11 21:51:04 +02:00
Scott Fan
271d083741 package/timescaledb: bump version to 2.21.0
Release notes: https://github.com/timescale/timescaledb/blob/2.21.0/CHANGELOG.md

Signed-off-by: Scott Fan <fancp2007@gmail.com>
Reviewed-by: Maxim Kochetkov <fido_max@inbox.ru>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-07-11 21:48:33 +02:00
Tim Soubry
3cf709e331 package/libhtp: security bump to version 0.5.49
Fixes a potential Denial of Service as described in [1].
Release notes:
https://github.com/OISF/libhtp/releases/tag/0.5.49

Fixes:
https://www.cve.org/CVERecord?id=CVE-2024-45797

[1] https://github.com/OISF/libhtp/security/advisories/GHSA-rqqp-24ch-248f

Signed-off-by: Tim Soubry <tim.soubry@mind.be>
[Julien: add link to fixed CVE]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-07-11 21:47:03 +02:00
Bernd Kuhls
b4bd1edcd0 package/apache: security bump version to 2.4.64
Fixes CVE-2025-53020, CVE-2025-49812, CVE-2025-49630, CVE-2025-23048,
CVE-2024-47252, CVE-2024-43394, CVE-2024-43204 & CVE-2024-42516.

Changelog: https://downloads.apache.org/httpd/CHANGES_2.4.64

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-07-11 21:44:40 +02:00
Romain Naour
6c0a713c66 configs/beagley_ai_defconfig: new defconfig
Adds support for BeagleY-AI board by introducing the
beagley_ai_defconfig file and related support files.

The BeagleY-AI uses the TI J722S SoC, also known as AM67A, also
known as TDA4VEN or TDA4AEN.

Retrieve BSP settings from meta-ti (may be useful for other TI boards):

- Set BR2_TARGET_ARM_TRUSTED_FIRMWARE_TARGET_BOARD = "lite"
  meta-ti-bsp/conf/machine/include/j722s.inc:TFA_BOARD = "lite"

- Set BR2_TARGET_UBOOT_NEEDS_ATF_BL31 to provide BL31 variable pointing
  to ATF bl31.bin to the U-Boot build process [1].

- Set BR2_TARGET_ARM_TRUSTED_FIRMWARE_BL32_OPTEE to OP-TEE as BL32
  secure payload. meta-ti set "SPD=opteed" to build ATF [2].

- Set BR2_TARGET_OPTEE_OS_PLATFORM to "k3-am62x".
  meta-ti uses the OPTEEMACHINE to set optee-os platform [3].
  meta-ti]$ git grep OPTEEMACHINE
  meta-ti-bsp/conf/machine/include/j722s.inc:OPTEEMACHINE = "k3-am62x"

- Use am67a_beagley_ai_a53 and am67a_beagley_ai_r5 u-boot
  defconfigs introduced in u-boot v2025.07 [4]

- u-boot distroboot (bootflow) detect extlinux.conf file from the first
  SDcard partition, so we have to install the kernel and its dtb file.
  Use devicetreedir instead of devicetree in extlinux.conf file to
  avoid hardcoding the devicetree file name. TI boards are able to
  retrieve dtb file name from an EEPROM (see TI_I2C_BOARD_DETECT in
  uboot).

- Use 6.15.6 stable release instead of the latest 6.12 LTS since the
  k3-j722s support was only introduced in 6.11 kernels.

- Provide a hash file for all custom package version
  (arm-trusted-firmware, linux, ti-k3-r5-loader, uboot) to enable
  BR2_DOWNLOAD_FORCE_CHECK_HASHES.

[1] https://git.yoctoproject.org/meta-ti/commit/?id=e74b9a1746d4d04757c87c1920a0f743e55ff096
[2] https://git.yoctoproject.org/meta-ti/tree/meta-ti-bsp/recipes-bsp/trusted-firmware-a/trusted-firmware-a-ti.inc?h=09.02.00.004#n7
[3] https://git.yoctoproject.org/meta-arm/tree/meta-arm/recipes-security/optee/optee-os.inc?h=4.0.3#n23
[4] b27c94958b

More information about the board can be found at:
https://www.beagleboard.org/boards/beagley-ai

Signed-off-by: Romain Naour <romain.naour@smile.fr>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-07-11 21:41:27 +02:00
Dario Binacchi
d4c5cfe80d configs/beaglebone: bump Linux to 6.12.23-ti-arm32-r11 and U-Boot to 2025.07
The patch bumps the Linux kernel to version 6.12.23-ti-arm32-r11 and
U-Boot to version 2025.07.

Tested on beaglebone black.

Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-07-11 21:35:00 +02:00
Dario Binacchi
8fe9da71a3 configs/ti_am62x_sk: bump U-Boot and Linux versions
This patch bumps:

- U-Boot to version v2025.07
- Linux kernel to version 6.12.36 (LTS)

Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com>
Reviewed-by: Bryan Brattlof <bb@ti.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-07-11 21:25:42 +02:00
Adrian Perez de Castro
676c4369d9 package/webkitgtk: bump to version 2.48.3
Fixes a number of crashes. Release notes:

  https://webkitgtk.org/2025/05/28/webkitgtk2.48.3-released.html

Signed-off-by: Adrian Perez de Castro <aperez@igalia.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-07-09 21:54:56 +02:00