Commit Graph

78720 Commits

Author SHA1 Message Date
James Hilliard
85fef1bb91 package/python-mypy-extensions: bump to version 1.1.0
Migrate from setuptools to flit build backend.

Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-09-17 18:42:51 +02:00
James Hilliard
aca5611af7 package/python-mypy: bump to version 1.18.1
Add new python-pathspec runtime/build dependency.

Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-09-17 18:42:51 +02:00
James Hilliard
b4ad6e6f8b package/python-poetry-core: bump to version 2.2.0
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-09-17 18:42:51 +02:00
James Hilliard
234b38ffdd package/python-pypa-build: bump to version 1.3.0
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-09-17 18:42:51 +02:00
James Hilliard
9f2f93df4e package/python-selenium: bump to version 4.35.0
License hash changed due to year update:
c62597e5cd

Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-09-17 18:42:50 +02:00
James Hilliard
3d3f4768df package/python-maturin: bump to version 1.9.4
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-09-17 18:42:50 +02:00
James Hilliard
598b20ca0a package/python-uswid: bump to version 0.5.2
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-09-17 18:42:50 +02:00
James Hilliard
431545111a package/python-cython: bump to version 3.1.3
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-09-17 18:42:50 +02:00
James Hilliard
6ea8e60e49 package/python-typing-extensions: bump to version 4.15.0
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-09-17 18:42:50 +02:00
James Hilliard
bb825488db package/python-starlette: bump to version 0.47.3
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-09-17 18:42:50 +02:00
James Hilliard
6cde2a46ff package/python-sentry-sdk: bump to version 2.38.0
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-09-17 18:42:50 +02:00
James Hilliard
a5c151f70d package/python-qrcode: bump to version 8.2
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-09-17 18:42:50 +02:00
James Hilliard
9a54553b85 package/python-pytz: bump to version 2025.2
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-09-17 18:42:50 +02:00
James Hilliard
2e480a8825 package/python-pypika-tortoise: bump to version 0.6.2
Migrate pep517 build backend from poetry to pdm-backend.

Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-09-17 18:42:50 +02:00
James Hilliard
b117d439bd package/python-pymodbus: bump to version 3.11.2
License hash changed due to year update:
c1e7f3b706

Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-09-17 18:42:50 +02:00
James Hilliard
8595b5da17 package/python-pycparser: bump to version 2.23
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-09-17 18:42:50 +02:00
James Hilliard
37e0d69f54 package/python-pyaml: bump to version 25.7.0
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-09-17 18:42:50 +02:00
James Hilliard
34386548d3 package/python-multidict: bump to version 6.6.4
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-09-17 18:42:50 +02:00
James Hilliard
d2a540a537 package/python-lxml: bump to version 6.0.1
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-09-17 18:42:50 +02:00
James Hilliard
117b45c2d8 package/python-httpcore: bump to version 1.0.9
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-09-17 18:42:50 +02:00
James Hilliard
ddaffc4aa9 package/python-grpclib: bump to version 0.4.8
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-09-17 18:42:50 +02:00
James Hilliard
c95f07d59a package/python-gobject: bump to version 3.54.2
License hash changed due to formatting changes:
e80a612fd7

Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-09-17 18:42:50 +02:00
Fiona Klute (WIWA)
44e0ba2bd2 package/python-trove-classifiers: bump to version 2025.9.11.17
package/python-cffi 2.0.0 (bumped in commit
07903d2b27) fails to build due to an
unknown trove-classifier:

* Getting build dependencies for wheel...
configuration error: `project.classifiers[8]` must be trove-classifier
DESCRIPTION:
    `PyPI classifier <https://pypi.org/classifiers/>`_.

GIVEN VALUE:
    "Programming Language :: Python :: Free Threading :: 2 - Beta"

OFFENDING RULE: 'format'

DEFINITION:
    {
        "type": "string",
        "format": "trove-classifier"
    }

For more details about `format` see
https://validate-pyproject.readthedocs.io/en/latest/api/validate_pyproject.formats.html

The list of trove classifiers Setuptools checks against is provided by
package/python-trove-classifiers. Upstream has added the classifier as
of version 2025.5.8.15 [1], as well as a bunch of others [2], so
update to fix the problem.

[1] 331838aaea
[2] https://github.com/pypa/trove-classifiers/compare/2025.1.15.22...2025.9.11.17

Fixes:
- 07903d2b27
- https://autobuild.buildroot.org/results/45b57a919182ae3f9ea0db9b0fa430a72e1e3cdf/

Signed-off-by: Fiona Klute (WIWA) <fiona.klute@gmx.de>
[Julien: add link to autobuilder failure]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-09-17 13:57:40 +02:00
James Hilliard
e2f0e4c115 package/python-dbus-fast: bump to version 2.44.3
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-09-16 23:19:02 +02:00
James Hilliard
ef0526fef3 package/python-cryptography: bump to version 45.0.7
Add host-pkgconf dependency which is needed for finding openssl.

Set OPENSSL_NO_VENDOR=1 in the environment to ensure we use the
system openssl library.

Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-09-16 22:55:39 +02:00
James Hilliard
07903d2b27 package/python-cffi: bump to version 2.0.0
License has changed due to license change from regular MIT to
MIT-no-attribution:
67a170dc79

Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-09-16 22:55:35 +02:00
James Hilliard
b3809dfaf3 package/python-certifi: bump to version 2025.8.3
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-09-16 22:55:31 +02:00
James Hilliard
86b1af2c3f package/python-asyncssh: bump to version 2.21.0
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-09-16 22:50:53 +02:00
James Hilliard
0865a1ae4b package/python-asyncclick: bump to version 8.2.2.2
Drop python-anyio runtime dependency which is now an optional
dependency of asyncclick. See:
ca93155e16

Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
[Julien: add commit reference for anyio dependency change]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-09-16 22:50:53 +02:00
James Hilliard
4277266753 package/python-anyio: bump to version 4.10.0
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-09-16 22:50:53 +02:00
Julien Olivain
6615c1bed8 package/apitrace: remove stale patch
Running the command:

    make apitrace-patch

fails with error:

    Applying 0003-Explicit-header-stdint.patch using patch:
    patching file frametrim/ft_dependecyobject.hpp
    Reversed (or previously applied) patch detected!  Skipping patch.
    1 out of 1 hunk ignored -- saving rejects to file frametrim/ft_dependecyobject.hpp.rej
    patching file retrace/metric_writer.cpp
    Reversed (or previously applied) patch detected!  Skipping patch.
    1 out of 1 hunk ignored -- saving rejects to file retrace/metric_writer.cpp.rej

Commit [1] "package/apitrace: fix build with GCC 15.x" introduced a
package patch in the branch master while Buildroot was in RC cycle.
This same commit was cherry-picked in [2] in the branch "next" to also
apply cleanly the patch for commit [3] "package/apitrace: bump to
version 13".

The merge commit [4] kept the apitrace package patch
"0003-Explicit-header-stdint.patch".

This commit fixes the issue by removing this stale patch.

[1] a4b0913280
[2] bf55f4713e
[3] aec2f2ddc4
[4] 0af159ae2b

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2025-09-16 22:42:45 +02:00
Julien Olivain
8988278241 package/cpp-httplib: remove stale patch
Running the command:

    make cpp-httplib-patch

fails with error:

    Applying 0001-merge-commit-from-fork.patch using patch:
    patching file httplib.h
    Reversed (or previously applied) patch detected!  Skipping patch.
    2 out of 2 hunks ignored -- saving rejects to file httplib.h.rej
    patching file test/test.cc
    Hunk #1 FAILED at 42.
    Hunk #2 FAILED at 2839.
    Hunk #3 FAILED at 3624.
    3 out of 3 hunks FAILED -- saving rejects to file test/test.cc.rej

Commit [1] "package/cpp-httplib: add patch for CVE-2025-46728"
introduced a package patch in the branch next while Buildroot was in
RC cycle. Just after, commit [2] "package/cpp-httplib: bump to
v0.25.0", also in branch next, removed this package patch.

This commit [1] was cherry-picked in [3] in the branch master, to
apply only the security fix for the 2025.08 release.

The merge commit [4] kept the cpp-httplib package patch
"0001-merge-commit-from-fork.patch".

This commit fixes the issue by removing this stale patch.

Fixes:
https://autobuild.buildroot.org/results/5b9843089ade428997035e49817208ce9c09a10e

[1] aea7c89396
[2] 519d03657c
[3] fd313c4ceb
[4] 0af159ae2b

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2025-09-16 22:42:25 +02:00
Francois Perrad
3224b90bac package/luajit: bump to version 871db2c84ecefd70a850e03a6c340214a81739f0
Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-09-16 22:23:22 +02:00
Saeed Kazemi
fc44dbcca4 package/mxt-app: bump to version 1.45
Release notes:
https://github.com/atmel-maxtouch/mxt-app/releases/tag/v1.45

Signed-off-by: Saeed Kazemi <kazemi.ms@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-09-16 22:10:12 +02:00
Saeed Kazemi
7740031390 package/procs: bump to version 0.14.10
Release notes:
https://github.com/dalance/procs/releases/tag/v0.14.10

Signed-off-by: Saeed Kazemi <kazemi.ms@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-09-16 22:10:04 +02:00
Saeed Kazemi
d9792fa4e6 package/zoxide: bump to version 0.9.8
Release notes:
https://github.com/ajeetdsouza/zoxide/releases/tag/v0.9.8

Signed-off-by: Saeed Kazemi <kazemi.ms@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-09-16 22:09:58 +02:00
Saeed Kazemi
7f57fa3ff9 package/fd: bump to version 10.3.0
Release notes:
https://github.com/sharkdp/fd/releases/tag/v10.3.0

Signed-off-by: Saeed Kazemi <kazemi.ms@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-09-16 22:09:55 +02:00
Saeed Kazemi
5b32fdc6c5 package/eza: bump to version 0.23.3
Release notes:
https://github.com/eza-community/eza/releases/tag/v0.23.3

Signed-off-by: Saeed Kazemi <kazemi.ms@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-09-16 22:09:51 +02:00
Dario Binacchi
2b2191cff5 package/inih: bump to version 62
Release notes:
https://github.com/benhoyt/inih/releases/tag/r62

Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-09-16 22:06:50 +02:00
Julien Olivain
2cbc64b2d4 configs/arm_foundationv8: add eth0 to be configured by dhcp at boot
The "board/arm/foundation-v8/readme.txt" board documentation file [1]
recommends to start the Foundation_Platform emulator with a nat
network, but the corresponding defconfig does include the dhcp
network configuration for the network interface.

This commit adds the "eth0" interface to be configured by DHCP
at boot, in order to have a working network connectivity.

[1] https://gitlab.com/buildroot.org/buildroot/-/blob/2025.08/board/arm/foundation-v8/readme.txt#L39

Cc: Vincent Stehlé <vincent.stehle@laposte.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2025-09-16 22:03:52 +02:00
Julien Olivain
51fd6aaa8a boot/boot-wrapper-aarch64: bump to git commit b621b157b4 (2025-06-10)
Changelog:
git log --oneline ac6742520d..b621b157b4

b621b15 aarch64: Enable access into FEAT_SPE_FDS register from EL2 and below
785302c aarch64: Enable use of ZT0
7f5a545 aarch64: Enable use of FPMR
0f3a153 aarch64: shuffle ID_AA64PFR{0,1}_EL1 definitions
0e78492 Makefile: Ensure initrd parameters in /chosen are up-to-date
1571345 aarch64: Enable access into FEAT_PMUv3p9 registers from EL2 and below
e1b9137 aarch64: Enable access into FEAT_FGT2 registers from EL2 and below

Cc: Vincent Stehlé <vincent.stehle@laposte.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2025-09-16 22:02:43 +02:00
Julien Olivain
4b14018a38 boot/boot-wrapper-aarch64: add hash file
Since boot-wrapper-aarch64 introduction in commit [1]
"boot-wrapper-aarch64: new package", the package never received a hash
file. This commit adds it, including the source archive and license
hashes.

[1] 7689b72e00

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2025-09-16 22:00:30 +02:00
Julien Olivain
afff65c340 boot/boot-wrapper-aarch64/Config.in: switch homepage URL to https
Buildroot commit [1] ("package: replace git:// URLs with https://
URLs where possible") switched _SITE URL from git to https, but did
not updated the package homepage in Config.in.

This commit updates it to match the package _SITE URL.

[1] 6626bf7c5f

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2025-09-16 21:59:40 +02:00
Thomas Devoogdt
dd68f4edd2 package/webkitgtk: security bump to version 2.48.6
Fixes a number of crashes. Release notes:

 - https://webkitgtk.org/2025/07/30/webkitgtk2.48.4-released.html
 - https://webkitgtk.org/2025/08/01/webkitgtk2.48.5-released.html
 - https://webkitgtk.org/2025/09/03/webkitgtk2.48.6-released.html

And brings some security fixes. Security advisory:

 - https://webkitgtk.org/security/WSA-2025-0005.html

Signed-off-by: Thomas Devoogdt <thomas@devoogdt.com>
Acked-By: Adrian Perez de Castro <aperez@igalia.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2025-09-16 21:55:52 +02:00
Titouan Christophe
f8fd48a924 package/redis: bump to v8.2.1
From the release notes
(https://github.com/redis/redis/blob/8.2.1/00-RELEASENOTES)

=============================================================
8.2.1 (v8.2.1)    Committed  Mon 18 Aug 2025 12:00:00 IST
=============================================================

Update urgency: `MODERATE`: Program an upgrade of the server, but it's not urgent.

- #14240 `INFO KEYSIZES` - potential incorrect histogram updates on cluster mode with modules
- #14274 Disable Active Defrag during flushing replica
- #14276 `XADD` or `XTRIM` can crash the server after loading RDB
- #Q6601 Potential crash when running `FLUSHDB` (MOD-10681)

- Query Engine - LeanVec and LVQ proprietary Intel optimizations were removed from Redis Open Source
- #Q6621 Fix regression in `INFO` (MOD-10779)

Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-09-16 20:54:41 +02:00
Peter Korsgaard
a93602c00b package/cjson: security bump to version 1.7.19
Fixes the following security issue:

CVE-2025-57052: cJSON 1.5.0 through 1.7.18 allows out-of-bounds access via
the decode_array_index_from_pointer function in cJSON_Utils.c, allowing
remote attackers to bypass array bounds checking and access restricted data
via malformed JSON pointer strings containing alphanumeric characters

https://nvd.nist.gov/vuln/detail/CVE-2025-57052
https://x-0r.com/posts/cJSON-Array-Index-Parsing-Vulnerability
74e1ff4994
https://github.com/DaveGamble/cJSON/releases/tag/v1.7.19

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-09-16 20:50:59 +02:00
Thomas Perale
d6c05d06d0 package/cjson: update deprecated CPE
The CPE 'cpe:2.3:a:cjson_project:cjson:0.0.0:*:*:*:*:*:*:*' has been
deprecated in favour of 'cpe:2.3:a:davegamble:cjson:0.0.0:*:*:*:*:*:*:*''

See https://nvd.nist.gov/products/cpe/detail/70BC45DA-D915-4A1D-96AF-84A6CECEE148

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-09-16 20:38:50 +02:00
Dario Binacchi
ef26611cc3 package/armadillo: bump to version 15.0.2
Release notes:
https://arma.sourceforge.net/docs.html#changelog

Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-09-15 23:02:03 +02:00
Maxim Kochetkov
c7be3e6038 package/libgeos: bump version to 3.14.0
Changelog: https://github.com/libgeos/geos/releases/tag/3.14.0

Bump minimal GCC version to 7. (Switched to C++17 as minimum requirement)
e142764b77

Since commit 26292ce880
libgeos uses fenv.h to catch FPU exceptions. Some libc implementation may
have no fenv support. So add a patch to detect fenv.h availability.

Signed-off-by: Maxim Kochetkov <fido_max@inbox.ru>
[Julien:
 - reformat patch title to fix check-package error
 - add Upstream header in patch to fix check-package error
]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-09-15 22:33:00 +02:00
Titouan Christophe
cbc3cb2c8d package/python-flask-cors: fix PKG_SITE
python-flask-cors was security bumped in commit 04cd135b26 [1], however this
commit did not update the _SITE url; which changes with each new release on
pypi. Therefore, downloading python-flask-cors would always fail.

Fixes:
https://autobuild.buildroot.org/results/eeadcb2e416cddaa5d059b31ea5dcc9f766a3cff

[1] 04cd135b26

Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
[Julien: add "Fixes" in commit log, from Yegor Yefremov comment]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-09-15 22:19:26 +02:00