mirror/buildroot
1
0
Fork 0
mirror of https://gitlab.com/buildroot.org/buildroot.git synced 2026-09-09 16:01:54 -09:00
Code Issues Packages Projects Releases Wiki Activity
78,734 Commits 6 Branches 483 Tags
85c71fee3fd30f310f3890db24efd52fc9119f60
Commit Graph

78734 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Thomas Perale
85c71fee3f package/x11r7/xserver_xorg-server: fix deprecated CPE 
The CPE 'x.org:xorg-server' is deprecated in favour of
'x.org:x_server'.

See the following:
  - https://nvd.nist.gov/products/cpe/detail/F6729083-29EE-4772-9DFF-80B43980D6BE
  - https://nvd.nist.gov/vuln/detail/CVE-2025-26601

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
[Julien: fix "xorg-server:x_server" to "x.org:x_server" in commit log]
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-17 19:32:33 +02:00
Thomas Perale
fdb540a00e package/python-aiohttp-session: fix deprecated CPE 
The CPE 'aiohttp-session_project:aiohttp-session' has been deprecated in
favour of 'aiohttp-session:aiohttp-session'.

See https://nvd.nist.gov/products/cpe/detail/667389BF-3561-49F9-A61A-6C86C7B82922

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
[Julien: add https:// prefix to url in commit log]
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-17 19:32:33 +02:00
Thomas Perale
843707ba1e package/modsecurity2: fix deprecated CPE 
The CPE 'trustwave:modsecurity' has been deprecated in favour of
'owasp:modsecurity'.

See the following:
  - https://nvd.nist.gov/products/cpe/detail/B305D665-44EC-44A6-8C46-C68BFDAD7C38
  - https://nvd.nist.gov/vuln/detail/CVE-2025-48866

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-17 19:32:33 +02:00
Thomas Perale
4ac3c1de56 package/iputils: fix deprecated CPE 
The CPE 'iputils_project:iputils' has been deprecated in favour of
'iputils:iputils'.

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-17 19:32:33 +02:00
Thomas Perale
ff492a2c87 package/upx: fix deprecated CPE 
The CPE 'upx_project:upx' has been deprecated in favour of 'upx:upx'.

See the following:
  - https://nvd.nist.gov/products/cpe/detail/36CA8E94-4A35-4373-8D69-22313060322B
  - https://nvd.nist.gov/vuln/detail/CVE-2020-24119

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-17 19:32:33 +02:00
Thomas Perale
2f993d55e8 package/python-cryptography: fix deprecated CPE 
The CPE 'cryptography_project:cryptography' has been deprecated in
favour of 'cryptography.io:cryptography'.

See the following:
 - https://nvd.nist.gov/products/cpe/detail/2EBA50FC-F3F9-40D5-82BD-EFB67F761153
 - https://nvd.nist.gov/vuln/detail/cve-2023-49083

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-17 19:32:33 +02:00
Thomas Perale
6c5f1b6414 package/pango: fix deprecated CPE 
The CPE 'pango:pango' has been deprecated in favour of 'gnome:pango'.

See https://nvd.nist.gov/products/cpe/detail/19B77822-6C34-41C8-8160-367D56AD1569

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-17 19:32:33 +02:00
Thomas Perale
0bbefd60f7 package/gnuplot: fix deprecated CPE 
The CPE 'gnuplot_project:gnuplot' has been deprecated in favour of
'gnuplot:gnuplot'.

See the following:
  - https://nvd.nist.gov/products/cpe/detail/DB68C9F5-3330-4749-A6F5-61FF041037CC
  - https://nvd.nist.gov/vuln/detail/cve-2025-31178

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-17 19:32:33 +02:00
Thomas Perale
cf480bda61 package/cpp-httplib: fix deprecated CPE 
The CPE 'cpp_httplib_project:cpp-httplib' has been deprecated in favour
of 'yhirose:cpp-httplib'.

See https://nvd.nist.gov/products/cpe/detail/5D557BEA-8246-464C-AB90-EA9495A0732A

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-17 19:32:33 +02:00
Thomas Perale
143bb15d6e package/boinc: fix deprecated CPE 
The CPE 'rom_walton:boinc' has been deprecated in favour of
'universityofcalifornia:boinc_client'.

See https://nvd.nist.gov/products/cpe/detail/DAC161C5-2154-44BF-916A-EACB524E8B8F

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-17 19:32:33 +02:00
Thomas Perale
505cd0d367 package/asterisk: fix deprecated CPE ID 
The CPE 'asterisk:open_source' has been deprecated in favour of
'sangoma:asterisk'.

See the following for more information:
 - https://nvd.nist.gov/products/cpe/detail/7FC01D7D-5AE9-42A8-B31E-A99E745E5BE5
 - https://github.com/asterisk/asterisk/security
 - https://nvd.nist.gov/vuln/detail/CVE-2024-42491

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-17 19:32:33 +02:00
James Hilliard
53eb75ef53 utils/scanpypi: remove python six module 
We dropped support for python2 a while back in [1], as such we
can remove the python six module which was only needed for
backwards comaptibility with python2.

[1] 2743ce00ca

Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
[Julien: add commit ref removing python2 support]
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-17 18:42:51 +02:00
James Hilliard
6448c3b425 package/python-distlib: bump to version 0.4.0 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-17 18:42:51 +02:00
James Hilliard
b08d65ac39 package/python-expandvars: bump to version 1.1.2 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-17 18:42:51 +02:00
James Hilliard
85fef1bb91 package/python-mypy-extensions: bump to version 1.1.0 
Migrate from setuptools to flit build backend.

Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-17 18:42:51 +02:00
James Hilliard
aca5611af7 package/python-mypy: bump to version 1.18.1 
Add new python-pathspec runtime/build dependency.

Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-17 18:42:51 +02:00
James Hilliard
b4ad6e6f8b package/python-poetry-core: bump to version 2.2.0 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-17 18:42:51 +02:00
James Hilliard
234b38ffdd package/python-pypa-build: bump to version 1.3.0 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-17 18:42:51 +02:00
James Hilliard
9f2f93df4e package/python-selenium: bump to version 4.35.0 
License hash changed due to year update:
c62597e5cd

Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-17 18:42:50 +02:00
James Hilliard
3d3f4768df package/python-maturin: bump to version 1.9.4 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-17 18:42:50 +02:00
James Hilliard
598b20ca0a package/python-uswid: bump to version 0.5.2 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-17 18:42:50 +02:00
James Hilliard
431545111a package/python-cython: bump to version 3.1.3 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-17 18:42:50 +02:00
James Hilliard
6ea8e60e49 package/python-typing-extensions: bump to version 4.15.0 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-17 18:42:50 +02:00
James Hilliard
bb825488db package/python-starlette: bump to version 0.47.3 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-17 18:42:50 +02:00
James Hilliard
6cde2a46ff package/python-sentry-sdk: bump to version 2.38.0 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-17 18:42:50 +02:00
James Hilliard
a5c151f70d package/python-qrcode: bump to version 8.2 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-17 18:42:50 +02:00
James Hilliard
9a54553b85 package/python-pytz: bump to version 2025.2 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-17 18:42:50 +02:00
James Hilliard
2e480a8825 package/python-pypika-tortoise: bump to version 0.6.2 
Migrate pep517 build backend from poetry to pdm-backend.

Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-17 18:42:50 +02:00
James Hilliard
b117d439bd package/python-pymodbus: bump to version 3.11.2 
License hash changed due to year update:
c1e7f3b706

Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-17 18:42:50 +02:00
James Hilliard
8595b5da17 package/python-pycparser: bump to version 2.23 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-17 18:42:50 +02:00
James Hilliard
37e0d69f54 package/python-pyaml: bump to version 25.7.0 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-17 18:42:50 +02:00
James Hilliard
34386548d3 package/python-multidict: bump to version 6.6.4 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-17 18:42:50 +02:00
James Hilliard
d2a540a537 package/python-lxml: bump to version 6.0.1 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-17 18:42:50 +02:00
James Hilliard
117b45c2d8 package/python-httpcore: bump to version 1.0.9 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-17 18:42:50 +02:00
James Hilliard
ddaffc4aa9 package/python-grpclib: bump to version 0.4.8 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-17 18:42:50 +02:00
James Hilliard
c95f07d59a package/python-gobject: bump to version 3.54.2 
License hash changed due to formatting changes:
e80a612fd7

Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-17 18:42:50 +02:00
Fiona Klute (WIWA)
44e0ba2bd2 package/python-trove-classifiers: bump to version 2025.9.11.17 
package/python-cffi 2.0.0 (bumped in commit
07903d2b27) fails to build due to an
unknown trove-classifier:

* Getting build dependencies for wheel...
configuration error: `project.classifiers[8]` must be trove-classifier
DESCRIPTION:
    `PyPI classifier <https://pypi.org/classifiers/>`_.

GIVEN VALUE:
    "Programming Language :: Python :: Free Threading :: 2 - Beta"

OFFENDING RULE: 'format'

DEFINITION:
    {
        "type": "string",
        "format": "trove-classifier"
    }

For more details about `format` see
https://validate-pyproject.readthedocs.io/en/latest/api/validate_pyproject.formats.html

The list of trove classifiers Setuptools checks against is provided by
package/python-trove-classifiers. Upstream has added the classifier as
of version 2025.5.8.15 [1], as well as a bunch of others [2], so
update to fix the problem.

[1] 331838aaea
[2] https://github.com/pypa/trove-classifiers/compare/2025.1.15.22...2025.9.11.17

Fixes:
- 07903d2b27
- https://autobuild.buildroot.org/results/45b57a919182ae3f9ea0db9b0fa430a72e1e3cdf/

Signed-off-by: Fiona Klute (WIWA) <fiona.klute@gmx.de>
[Julien: add link to autobuilder failure]
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-17 13:57:40 +02:00
James Hilliard
e2f0e4c115 package/python-dbus-fast: bump to version 2.44.3 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-16 23:19:02 +02:00
James Hilliard
ef0526fef3 package/python-cryptography: bump to version 45.0.7 
Add host-pkgconf dependency which is needed for finding openssl.

Set OPENSSL_NO_VENDOR=1 in the environment to ensure we use the
system openssl library.

Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-16 22:55:39 +02:00
James Hilliard
07903d2b27 package/python-cffi: bump to version 2.0.0 
License has changed due to license change from regular MIT to
MIT-no-attribution:
67a170dc79

Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-16 22:55:35 +02:00
James Hilliard
b3809dfaf3 package/python-certifi: bump to version 2025.8.3 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-16 22:55:31 +02:00
James Hilliard
86b1af2c3f package/python-asyncssh: bump to version 2.21.0 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-16 22:50:53 +02:00
James Hilliard
0865a1ae4b package/python-asyncclick: bump to version 8.2.2.2 
Drop python-anyio runtime dependency which is now an optional
dependency of asyncclick. See:
ca93155e16

Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
[Julien: add commit reference for anyio dependency change]
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-16 22:50:53 +02:00
James Hilliard
4277266753 package/python-anyio: bump to version 4.10.0 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-16 22:50:53 +02:00
Julien Olivain
6615c1bed8 package/apitrace: remove stale patch 
Running the command:

    make apitrace-patch

fails with error:

    Applying 0003-Explicit-header-stdint.patch using patch:
    patching file frametrim/ft_dependecyobject.hpp
    Reversed (or previously applied) patch detected!  Skipping patch.
    1 out of 1 hunk ignored -- saving rejects to file frametrim/ft_dependecyobject.hpp.rej
    patching file retrace/metric_writer.cpp
    Reversed (or previously applied) patch detected!  Skipping patch.
    1 out of 1 hunk ignored -- saving rejects to file retrace/metric_writer.cpp.rej

Commit [1] "package/apitrace: fix build with GCC 15.x" introduced a
package patch in the branch master while Buildroot was in RC cycle.
This same commit was cherry-picked in [2] in the branch "next" to also
apply cleanly the patch for commit [3] "package/apitrace: bump to
version 13".

The merge commit [4] kept the apitrace package patch
"0003-Explicit-header-stdint.patch".

This commit fixes the issue by removing this stale patch.

[1] a4b0913280
[2] bf55f4713e
[3] aec2f2ddc4
[4] 0af159ae2b

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2025-09-16 22:42:45 +02:00
Julien Olivain
8988278241 package/cpp-httplib: remove stale patch 
Running the command:

    make cpp-httplib-patch

fails with error:

    Applying 0001-merge-commit-from-fork.patch using patch:
    patching file httplib.h
    Reversed (or previously applied) patch detected!  Skipping patch.
    2 out of 2 hunks ignored -- saving rejects to file httplib.h.rej
    patching file test/test.cc
    Hunk #1 FAILED at 42.
    Hunk #2 FAILED at 2839.
    Hunk #3 FAILED at 3624.
    3 out of 3 hunks FAILED -- saving rejects to file test/test.cc.rej

Commit [1] "package/cpp-httplib: add patch for CVE-2025-46728"
introduced a package patch in the branch next while Buildroot was in
RC cycle. Just after, commit [2] "package/cpp-httplib: bump to
v0.25.0", also in branch next, removed this package patch.

This commit [1] was cherry-picked in [3] in the branch master, to
apply only the security fix for the 2025.08 release.

The merge commit [4] kept the cpp-httplib package patch
"0001-merge-commit-from-fork.patch".

This commit fixes the issue by removing this stale patch.

Fixes:
https://autobuild.buildroot.org/results/5b9843089ade428997035e49817208ce9c09a10e

[1] aea7c89396
[2] 519d03657c
[3] fd313c4ceb
[4] 0af159ae2b

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2025-09-16 22:42:25 +02:00
Francois Perrad
3224b90bac package/luajit: bump to version 871db2c84ecefd70a850e03a6c340214a81739f0 
Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-16 22:23:22 +02:00
Saeed Kazemi
fc44dbcca4 package/mxt-app: bump to version 1.45 
Release notes:
https://github.com/atmel-maxtouch/mxt-app/releases/tag/v1.45

Signed-off-by: Saeed Kazemi <kazemi.ms@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-16 22:10:12 +02:00
Saeed Kazemi
7740031390 package/procs: bump to version 0.14.10 
Release notes:
https://github.com/dalance/procs/releases/tag/v0.14.10

Signed-off-by: Saeed Kazemi <kazemi.ms@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-16 22:10:04 +02:00
Saeed Kazemi
d9792fa4e6 package/zoxide: bump to version 0.9.8 
Release notes:
https://github.com/ajeetdsouza/zoxide/releases/tag/v0.9.8

Signed-off-by: Saeed Kazemi <kazemi.ms@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-16 22:09:58 +02:00