Commit Graph

36104 Commits

Author SHA1 Message Date
Alexandru Ardelean
0d705d716a python-pycrate: update to 0.7.11; add test.sh
Bump version 0.6.0 -> 0.7.11.
Add test.sh to verify Envelope/Sequence element construction and value access.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-14 08:00:30 +03:00
Alexandru Ardelean
7564f1db00 python-gevent: update to 26.4.0; add test.sh
Bump version 25.9.1 -> 26.4.0.
Add test.sh to verify greenlet spawning and joining.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-14 08:00:30 +03:00
Alexandru Ardelean
86be9943bf python-botocore: update to 1.42.88
Bump version 1.42.86 -> 1.42.88.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-14 08:00:30 +03:00
Alexandru Ardelean
1e274804a8 python-boto3: update to 1.42.88
Bump version 1.42.86 -> 1.42.88.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-14 08:00:30 +03:00
Tianling Shen
119f543669 xray-core: Update to 26.3.27
Release note: https://github.com/XTLS/Xray-core/releases/tag/v26.3.27

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2026-04-14 10:42:32 +08:00
Tianling Shen
3f5c7e46dc yq: Update to 4.52.5
Release note: https://github.com/mikefarah/yq/releases/tag/v4.52.5

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2026-04-14 10:41:35 +08:00
Qingfang Deng
9faf26770b openvpn: update to 2.7.1
The new DCO module depends on OpenVPN 2.7.1.
For details refer to https://github.com/OpenVPN/openvpn/blob/v2.7.1/Changes.rst

Removed upstreamed wolfSSL patches:
- 101-Fix-EVP_PKEY_CTX_-compilation-with-wolfSSL.patch
- 102-Disable-external-ec-key-support-when-building-with-wolfSSL.patch

Reworked 100-mbedtls-disable-runtime-version-check.patch to use
MBEDTLS_VERSION_STRING instead of a mutable buffer.

Signed-off-by: Qingfang Deng <dqfext@gmail.com>
2026-04-13 19:24:25 +03:00
Qingfang Deng
5f02f01359 ovpn-dco: switch to the new source
The ovpn kernel module is is part of the Linux kernel starting from
version 6.16.
Switch to the new officially maintained backports source:
https://github.com/OpenVPN/ovpn-backports

Signed-off-by: Qingfang Deng <dqfext@gmail.com>
2026-04-13 19:24:25 +03:00
Alexandru Ardelean
29e685e1f8 python-ubus: backport patch for newer Python
Build is failing for a while now with error:
```
14.3.0_musl/usr/include -I/builder/shared-workdir/build/sdk/staging_dir/toolchain-mipsel_24kc_gcc-14.3.0_musl/include -I/builder/shared-workdir/build/sdk/staging_dir/toolchain-mipsel_24kc_gcc-14.3.0_musl/include/fortify -I/builder/shared-workdir/build/sdk/staging_dir/target-mipsel_24kc_musl/usr/include/python3.14 -fPIC -I/builder/shared-workdir/build/sdk/staging_dir/target-mipsel_24kc_musl/usr/include/python3.14 -c ./ubus_python.c -o build/temp.linux-mipsel-cpython-314/ubus_python.o
./ubus_python.c: In function 'ubus_python_add':
./ubus_python.c:1081:17: error: implicit declaration of function 'PyEval_CallMethod'; did you mean 'PyObject_CallMethod'? [-Wimplicit-function-declaration]
 1081 |                 PyEval_CallMethod(python_alloc_list, "pop", "");
      |                 ^~~~~~~~~~~~~~~~~
      |                 PyObject_CallMethod
error: command '/builder/shared-workdir/build/sdk/staging_dir/toolc
```

This has been fixed on version 0.1.3, but that hasn't been
published to pypi yet.

Also add test.sh

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-13 08:27:10 +03:00
George Sapkin
7e99a65d72 sqlite3: bump to 3.53.0
Changes: https://sqlite.org/releaselog/3_53_0.html
Signed-off-by: George Sapkin <george@sapk.in>
2026-04-12 19:15:49 +03:00
George Sapkin
59eabef81a syncthing: bump to 2.0.16
Changes: https://github.com/syncthing/syncthing/releases/tag/v2.0.16
Signed-off-by: George Sapkin <george@sapk.in>
2026-04-12 19:15:32 +03:00
George Sapkin
1a1c703287 golang: bump 1.26 to 1.26.2
Fixes: CVE-2026-27140
Fixes: CVE-2026-27143
Fixes: CVE-2026-27144
Fixes: CVE-2026-32280
Fixes: CVE-2026-32281
Fixes: CVE-2026-32282
Fixes: CVE-2026-32283
Fixes: CVE-2026-32288
Fixes: CVE-2026-32289
Fixes: CVE-2026-33810
Changes: https://github.com/golang/go/issues?q=milestone%3AGo1.26.2+label%3ACherryPickApproved

Signed-off-by: George Sapkin <george@sapk.in>
2026-04-12 19:15:03 +03:00
Dmitriy Zh
1d6b1b5d9f fix: remove depends on PACKAGE_lpac from Config.in
fix eror message after make menuconfig (https://github.com/openwrt/packages/pull/29044#issuecomment-4230243845)

Signed-off-by: Zhitomirskiy Dmitriy <just.timonych@gmail.com>
2026-04-12 16:07:51 +03:00
Alexandru Ardelean
2bb434d3c3 python-sentry-sdk: update to 2.57.0
Update package to 2.57.0.

Major version 2.0 breaking changes:
- Hub API deprecated; replaced with new_scope / isolation_scope API;
  configure_scope / push_scope removed; Hub class retained but deprecated
- Python 2.7 support dropped; internal SDK data model refactored
- Migration guide: https://docs.sentry.io/platforms/python/migration/1.x-to-2.x

New features (2.0 - 2.57):
- Many integrations now auto-activate if the package is detected:
  Ariadne, ARQ, asyncpg, Chalice, Loguru, PyMongo, Quart, Starlite,
  Strawberry, Anthropic, Cohere, Graphene, LiteLLM, Google GenAI
- Extensive AI/LLM monitoring with gen_ai.* span attributes aligned
  with OpenTelemetry semantic conventions
- Feature flag tracking: LaunchDarkly, Unleash integrations
- Sentry structured logs (beta, 2.30): capture Loguru log messages
- New SysExitIntegration (2.14)
- failed_request_status_codes configurable for FastAPI/Starlette (2.5)
- Client cert/key support for HttpTransport (2.10)
- Experimental async transport added (2.57)

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-12 10:14:26 +03:00
Alexandru Ardelean
d4058a9479 python-awscli: update to 1.44.76
Update package to 1.44.76.

Key changes since 1.29.7:

1.32.0: Python 3.7 dropped.

1.33.0: Version numbering aligned with botocore/boto3; aws logs
start-live-tail command added.

1.35.0 (S3 checksum): --checksum-mode and --checksum-algorithm flags
added to high-level s3 commands.

1.36.0: Shorthand @= file-loading syntax added; aws s3 ls gains
--bucket-name-prefix and --bucket-region filters (1.36.35).

1.37.0: CRC32 default for uploads; response checksum validation.

1.39.0: Python 3.8 dropped.

1.40.0: aws eks update-kubeconfig gains --assume-role-arn for
cross-account access; STS regional endpoints now default.

1.42.42: aws eks update-kubeconfig gets --proxy-url option.

1.43.0: Login credential provider support.

1.44.0: New --v2-debug flag and AWS_CLI_UPGRADE_DEBUG_MODE env var to
detect CLI v2 breaking changes.

1.44.57: aws s3 mb gains --tags flag.

1.44.76 (security): Tighter file permissions for CodeArtifact login and
IAM MFA bootstrap output.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-12 10:14:26 +03:00
Alexandru Ardelean
9615f65675 python-s3transfer: update to 0.16.0
Update package to 0.16.0.

Changes since 0.6.1:

0.7.0: SSE-C arguments now passed to CompleteMultipartUpload for upload
operations.

0.8.0 (CRT improvements): Wider CRT upload functionality; CRC32
auto-configured for CRT uploads; file-like object support for seekable
and non-seekable streams; dynamic target throughput via AWS CRT system
detection.

0.9.0: Python 3.7 dropped.

0.10.0: S3 Express support for CRT; Multi-Region Access Point support
for CRT (0.10.4).

0.11.0 (CRC32 default): Now uses CRC32 by default and supports
user-provided full-object checksums.

0.12.0: Python 3.8 dropped.

0.13.0: ETag validation during multipart downloads.

0.15.0: ETag validation during multipart copies.

0.16.0: TransferConfig options (multipart_threshold, multipart_chunksize,
max_request_concurrency) now supported in CRTTransferManager.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-12 10:14:26 +03:00
Alexandru Ardelean
a91080e035 python-botocore: update to 1.42.86
Update package to 1.42.86.

Key changes since 1.31.7:

1.32.1: botocore wheel now ships compressed service models to reduce
disk footprint.

1.33.0: Version aligned; boto3/botocore share the same version number.

1.36.0 (S3 checksum overhaul): CRC32 default for uploads; CRC64NVME
support via awscrt; configurable via request_checksum_calculation and
response_checksum_validation settings.

1.37.0 (Account-based endpoints): DynamoDB support for account-based
endpoint routing; smithy-rpc-v2-cbor protocol support (1.37.2).

1.38.0: Python 3.8 dropped.

1.40.0: STS regional endpoints now default; login credential provider
added (1.41.0).

1.42.29: TCP Keep-Alive config via BOTOCORE_TCP_KEEPALIVE env var.
1.42.43: HTTP blocksize increased 16KB -> 128KB with urllib3 v2.
1.42.53: SHA512/XXHASH checksum algorithms added.
1.42.85: SigV4a auth_scheme_preference bugfix.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-12 10:14:26 +03:00
Alexandru Ardelean
bae2e54d90 python-boto3: update to 1.42.86
Update package to 1.42.86.

Key changes since 1.28.7:

1.33.0: boto3 and botocore now share the same version number.

1.36.0 (S3 checksum overhaul): CRC32 is now calculated by default for
all supported S3 operations; Content-MD5 header no longer auto-populated;
response checksum validation added; CRC64NVME and SHA512 algorithms
supported via optional awscrt.

1.38.0 (Account-based endpoints): DynamoDB and future services now use
https://<account-id>.ddb.<region>.amazonaws.com endpoints when account
ID is available. Python 3.8 end of support.

1.40.0 (STS endpoint default): Changed from legacy to regional; override
via sts_regional_endpoints config or AWS_STS_REGIONAL_ENDPOINTS env var.

1.41.0 (New credential provider): login credential provider added,
allowing use of AWS Management Console credentials.

Hundreds of API additions across Bedrock, ECS, EKS, Lambda, SageMaker,
and many more services.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-12 10:14:26 +03:00
John Audia
1e474e0422 htop: update to 3.5.0
Changelog: https://github.com/htop-dev/htop/compare/3.4.1...3.5.0

Build system: x86/64
Build-tested: x86/64-glibc
Run-tested: x86/64-glibc

Signed-off-by: John Audia <therealgraysky@proton.me>
2026-04-12 09:07:59 +03:00
Federico Capoano
a9d2dbeeb4 openwisp-config: update to 1.2.1
Change log:
https://github.com/openwisp/openwisp-config/releases/tag/1.2.1

Signed-off-by: Federico Capoano <f.capoano@openwisp.io>
2026-04-12 09:06:39 +03:00
John Audia
153248821c iperf3: update to 3.21
Update to latest upstream release.

Changelog: https://github.com/esnet/iperf/releases/tag/3.21

Build system: x86/64
Build-tested: x86/64-glibc
Run-tested: x86/64-glibc

Signed-off-by: John Audia <therealgraysky@proton.me>
2026-04-12 09:05:27 +03:00
Dirk Brenken
79f2db6cc5 banip: update 1.8.5-2
* fixed two issues in the mail template, reported in the forum
* tweak the f_report function
* changed the f_actual function to reduce subshell calls
* further optimize the monitor function:
  * fixed a possible RDAP rate-limit race condition,
    serialize the rdap_tsfile via flock
  * block_cache bounded growth, when the cache reaches 500
    entries it resets to empty, preventing unbounded string growth
    in the monitor loop
* set the printf format string in single quotes (overall)

Signed-off-by: Dirk Brenken <dev@brenken.org>
2026-04-11 18:43:50 +02:00
Alexandru Ardelean
684e738cab python3-chardet: update to 7.4.1
Update package to 7.4.1.

Changes since 7.2.0:

7.3.0:
- License changed from MIT to 0BSD (no attribution required)
- New mime_type field in all detection results -- identifies binary and text
  file types via magic number matching (40+ formats supported)
- Performance: 4 additional modules compiled with mypyc; per-file detection
  capped at 16 KB (worst-case time: 62ms -> 26ms)
- Added riscv64 prebuilt wheel support
- Bug fix: null-separated ASCII data was misdetected as UTF-16-BE

7.4.0:
- Accuracy improved from 98.6% to 99.3%; speed improved with new dense
  zlib-compressed model format (cold start: ~75ms -> ~13ms with mypyc)
- Training data overhauled: added MADLAD-400 and Wikipedia sources,
  eliminated train/test overlap, samples increased from 15K to 25K per
  language/encoding pair
- Bug fix: dedicated structural analyzers added for CP932, CP949, and
  Big5-HKSCS (previously sharing base encoding byte-range analyzer)

7.4.1:
- Bug fix: BOM-prefixed UTF-16/32 input now correctly returns utf-16/utf-32
  instead of endian-specific variants (utf-16-le/utf-16-be/etc.), which
  previously caused a stray U+FEFF character at the start of decoded text

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-11 12:56:34 +03:00
Alexandru Ardelean
1616acb388 python3-cryptography: update to 46.0.7
Update package to 46.0.7.

Security fix:
- CVE-2026-39892: Non-contiguous buffers could be passed to Python buffer
  APIs potentially causing a buffer overflow -- now blocked

Wheels recompiled against OpenSSL 3.5.6 on Windows, macOS, and Linux.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-11 12:56:34 +03:00
Alexandru Ardelean
bf34f9abb4 python3-flask-httpauth: update to 4.8.1
Update package to 4.8.1.

Security fix:
- Empty or missing tokens are no longer accepted; previously this could
  allow bypassing token authentication

Documentation improvements: new installation section, revised docs, fixed
broken links.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-11 12:56:34 +03:00
Alexandru Ardelean
b5a553b457 python3-django-restframework: update to 3.17.1
Update package to 3.17.1.

Bug fix:
- HTMLFormRenderer crashed with empty datetime field values

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-11 12:56:34 +03:00
Alexandru Ardelean
06eb22a606 python3-django: update to 6.0.4
Update package to 6.0.4.

Security fixes:
- CVE-2026-33033: DoS fix in MultiPartParser -- base64-encoded multipart
  uploads with excessive whitespace could cause repeated memory copying
- CVE-2026-3902: ASGI header spoofing fixed -- headers containing underscores
  are now ignored by ASGIRequest to prevent hyphen/underscore conflation
  attacks
- CVE-2026-4277: Privilege abuse in GenericInlineModelAdmin -- add permissions
  on inline model instances were not validated against forged POST data
- CVE-2026-4292: Privilege abuse in ModelAdmin.list_editable -- changelist
  forms incorrectly allowed new instances to be created via forged POST data
- CVE-2026-33034: DoS via ASGI memory upload limit bypass -- missing or
  understated Content-Length could bypass DATA_UPLOAD_MAX_MEMORY_SIZE

Bug fixes:
- alogin/alogout regression where request.user was not set/cleared if already
  materialized by sync middleware
- RelatedFieldWidgetWrapper regression incorrectly wrapping all widgets in a
  fieldset in admin forms

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-11 12:56:34 +03:00
Dirk Brenken
0255308cbe adblock: update 4.5.4-3
* fixed a problem/regression with the display of results in f_search and f_report

Signed-off-by: Dirk Brenken <dev@brenken.org>
2026-04-11 10:48:53 +02:00
Hannu Nyman
164d5a0cf7 tvheadend: update to 2026-04-03 (395afb8512d0)
I could not reproduce the bug reported, but the update should fix it
anyway. Tested on Turris Omnia, OpenWrt r31111.

Signed-off-by: Marius Dinu <m95d+git at psihoexpert.ro>
[imported from mailing list]
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2026-04-11 10:04:30 +03:00
Qingfang Deng
aa0a14e2dd collectd: remove redundant liblua link flag
The link flag makes the main program depend on liblua in official
package feeds, even if collectd-mod-lua is not installed.
The plugin is already linked against liblua.so, so this can be removed.

Signed-off-by: Qingfang Deng <dqfext@gmail.com>
[added PKG_RELEASE bump]
2026-04-11 09:50:22 +03:00
John Audia
60c442a776 openssh: update Makefile to build without PKG_FIXUP
Build without PKG_FIXUP:=autoreconf
This was introduced with: a79c49578c

Build system: x86/64
Build-tested: x86/64-glibc
Run-tested: Intel N150

Signed-off-by: John Audia <therealgraysky@proton.me>
2026-04-11 09:14:40 +03:00
Daniel F. Dickinson
c3a85b96de watchcat: use logical network to fix restart_interface
Watchcat was failing to restart layer-3 interfaces when in mode
'restart_iface'. The previously attempted fix made the situation
worse in that it resulted in layer 2 interfaces also failing to
start.

This was because we are passed the interface name (e.g. eth0,
l2p0, or br-lan), but ifup needs the logical network (e.g. 'lan'
which corresponds to the network device).

Update to use find_config from /lib/network/config.sh to find the
logical network from the interface name, and use ifup on the
logical network to restart the underlying interface(s) associated
with the logical network.

Signed-off-by: Daniel F. Dickinson <dfdpublic@wildtechgarden.ca>
2026-04-11 09:13:01 +03:00
Daniel F. Dickinson
e4130e53bf zabbix: update to 7.0.24
Bump version and refresh patches.

Signed-off-by: Daniel F. Dickinson <dfdpublic@wildtechgarden.ca>
2026-04-11 09:12:36 +03:00
Daniel F. Dickinson
2aadd0d97f zabbix: tweak server configuration
* Fix path to fping and use fping as fping6
* For privacy, disable call to public API to check for Zabbix version update

Signed-off-by: Daniel F. Dickinson <dfdpublic@wildtechgarden.ca>
2026-04-11 09:12:36 +03:00
Zhitomirskiy Dmitriy
6675cd05ce lpac: upgrade to 2.3.0 - enable uqmi and LPAC_WITH_PCSC
Update lpac to upstream v2.3.0 (https://github.com/estkme-group/lpac/releases/tag/v2.3.0)

Signed-off-by: Zhitomirskiy Dmitriy <just.timonych@gmail.com>
2026-04-11 09:07:06 +03:00
Daniel F. Dickinson
f534f48ab8 radicale3: update to 3.7.0
Bump version and add placeholder for new [sharing]
section/capability.

Signed-off-by: Daniel F. Dickinson <dfdpublic@wildtechgarden.ca>
2026-04-10 16:32:10 +03:00
Eric Fahlgren
e317276974 owut: update to 2026.04.09
Bug fixes:
    efahl/owut@e80489e641 owut: add proxy support via env vars
    efahl/owut@5d6760b59e owut: fix bug in response headers value

Enhancements:
    efahl/owut@ceeccc93fe owut: handle no_proxy env var
    efahl/owut@34367e6e62 owut: accessibility and readability

Signed-off-by: Eric Fahlgren <ericfahlgren@gmail.com>
2026-04-10 16:28:07 +03:00
Jan Hák
4c684fb092 knot: update to version 3.5.4
Release notes: https://www.knot-dns.cz/2026-04-02-version-354.html

Signed-off-by: Jan Hák <jan.hak@nic.cz>
2026-04-10 16:07:49 +03:00
Alexandru Ardelean
5264f85e22 python3-lxml: add package guard to test.sh
The test.sh lacked a package name guard, causing it to run (and fail)
when the -src subpackage was tested without python3 installed.
Add the standard guard to skip the test for non-main packages.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-10 14:01:09 +03:00
Alexandru Ardelean
a547770f98 python3-et_xmlfile: add python3-xml dep, fix test
The test.sh imports xml.etree.ElementTree from the stdlib, and
et_xmlfile itself falls back to stdlib xml when lxml is unavailable.
Add python3-xml to DEPENDS to ensure the xml module is present at
both install and test time.

The test used et_xmlfile.__version__ without importing the et_xmlfile
module (only 'from et_xmlfile import xmlfile' was present). Add
'import et_xmlfile' so the version check works correctly.

The test.sh lacked a package name guard, causing it to run (and fail)
when the -src subpackage was tested without python3 installed.
Add the standard guard to skip the test for non-main packages.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-10 14:01:09 +03:00
Alexandru Ardelean
0dd65907ab python3-influxdb: update to 5.3.2
Update package to 5.3.2.

Bug fix:
- Correctly serialize nanosecond-precision DataFrame timestamps;
  previously nanosecond timestamps were not serialized correctly when
  writing via DataFrameClient

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-10 14:01:09 +03:00
Alexandru Ardelean
40c8afbc5a python3-pytest: update to 9.0.3
Update package to 9.0.3.

Security fix:
- CVE-2025-71176: Fixed use of an insecure temporary directory

Bug fixes:
- pytest.approx now correctly accounts for collections.abc.Mapping key
  order when comparing mappings
- Blocking a conftest.py with -p no: is now explicitly disallowed with a
  clear UsageError (previously caused an internal assertion failure)
- Fixed crash when a test raises an ExceptionGroup with
  __tracebackhide__ = True
- Fixed non-string messages in unittest.TestCase.subTest() not printed

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-10 14:01:09 +03:00
Alexandru Ardelean
9769e03752 python3-platformdirs: update to 4.9.6
Update package to 4.9.6.

4.9.5: Silent patch release.
4.9.6: Fixed shell quoting bug in the release workflow -- double quotes
now used for tag variable expansion in CI scripts.

No functional or API changes for end users between 4.9.4 and 4.9.6.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-10 14:01:09 +03:00
Alexandru Ardelean
a6f91c626a python3-openpyxl: update to 3.1.5
Update package to 3.1.5.

Changes since 3.0.10:

3.1.0: Added support for data table formulae; Rich Text in cells; Custom
Document Properties; mapped chartspace graphical properties to charts.
Breaking: removed deprecated workbook methods (get_named_range,
add_named_range, remove_named_range) and several worksheet properties.
Bug fixes: fixed table filters being overridden, various dataframe and
multiindex alignment issues.

3.1.1: Fixed DocumentProperties times being set only at module import;
fixed missing worksheet-specific definitions.

3.1.2: Fixed reading worksheets in read-only mode with locally scoped
definitions; fixed empty custom properties causing invalid files.

3.1.3: Major performance fixes -- column name caching, pivot table
loading, custom properties reading; fixed rich-text save without lxml;
fixed file handler leaks; fixed timedelta reading in read-only mode;
improved duplicate named styles handling.

3.1.4: Minor bug fixes and stability improvements.

3.1.5: Latest stable release with cumulative fixes.

Add test.sh to verify write/read roundtrip of xlsx workbooks.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-10 14:01:09 +03:00
Alexandru Ardelean
98298ce7f8 python3-pillow: update to 12.2.0
Update package to 12.2.0.

Security fixes:
- Prevent FITS decompression bomb -- GZIP data from FITS images is now
  limited to prevent decompression bomb attacks
- Fix OOB write with invalid tile extents -- 12.1.1 PSD tile extent checks
  did not account for integer overflow
- Prevent PDF parsing trailer infinite loop -- cyclic trailer references
  in PDFs are now detected and stopped
- Fix integer overflow when processing fonts with excessively large
  per-glyph advances
- Fix heap buffer overflow with nested list coordinates -- nested lists
  passed to ImagePath.Path, polygon(), line() etc. are now validated to
  contain exactly two numeric coordinates

New features:
- ImageText.Text.wrap() -- new method to wrap text within a given
  width/height, with optional shrink/grow scaling
- FontFile.to_imagefont() -- FontFile instances can now be directly
  converted to ImageFont instances
- Support reading JPEG2000 images with CMYK palettes

Performance:
- Lazy plugin loading -- open is 2.3-15.6x faster, save is 2.2-9x faster
  for common formats

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-10 14:01:09 +03:00
Alexandru Ardelean
653d85d226 python3-jsonpath-ng: update to 1.8.0
Update package to 1.8.0.

Changes since 1.5.3:

1.6.0: Removed Python 2 and six dependency; field names with literals
now enclosed in quotes; removed decorator and testscenarios dependencies;
made path instances hashable.

1.6.1: Fixed lambda-based updates; fixed assignment when root element is
a list; added keys keyword; added slice step support; don't fail on regex
match against non-strings; Python 3.12 support.

1.7.0: Added wherenot operator; added path extension exposing datum's
path from the expression itself; allowed numeric values as keys; added
negative and wildcard indices in Split; fixed boolean value update bug;
removed Python 3.7 support; parse table constructed only once
(performance improvement).

1.8.0: Added support for comma-separated indices (e.g., field[0,1,2]);
added EMOJI and CJK Unicode support; added type hints; fixed wildcard
path resolution in field filters; fixed False/None value handling in
bool filters; vendored ply (no longer maintained upstream); dropped
Python 3.8 and 3.9 support; Python 3.13/3.14 tested.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-10 14:00:41 +03:00
Alexandru Ardelean
15e2da047b python3-greenlet: update to 3.4.0
Update package to 3.4.0.

Changes:
- Added binary wheels for RISC-V 64
- Fixed multiple rare crash paths during interpreter shutdown; now uses
  the atexit module (subtle API change: getcurrent unavailable once
  atexit fires)
- Fixed multiple race conditions in free-threaded (no-GIL) builds when
  greenlets are accessed from multiple threads, some causing assertion
  failures or interpreter crashes
- Several minor correctness fixes from automated code audit

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-10 14:00:41 +03:00
Alexandru Ardelean
eb513f6cec python3-pynacl: update to 1.6.2
Update package to 1.6.2.

Security fix:
- Updated bundled libsodium to 1.0.20-stable (2025-12-31 build) to
  resolve CVE-2025-69277

Refresh 001-always-compile-ed25519.patch for the updated source.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-10 14:00:41 +03:00
Alexandru Ardelean
a509f32047 python3-cryptodomex: update to 3.23.0
Update package to 3.23.0.

pycryptodomex is the same codebase as pycryptodome under the Cryptodome
namespace. All changes are identical to python3-cryptodome 3.23.0:

3.19.0: Added ECDH support via Cryptodome.Protocol.DH; TupleHash128/256
update() can now hash multiple items at once.

3.19.1 (security): Patched side-channel leakage in OAEP decryption that
could enable a Manger attack.

3.20.0: Added TurboSHAKE128 and TurboSHAKE256; Cryptodome.Hash.new()
factory; AES-GCM support for PBES2/PKCS#8 containers.

3.21.0: Added Curve25519/X25519 and Curve448/X448 support; dropped
Python 3.5 support.

3.22.0: Added HPKE (RFC 9180) support; dropped Python 3.6 support.

3.23.0: Added Key Wrap (KW/KWP, RFC 3394/5649) cipher modes; Windows
ARM wheels; fixed HashEdDSA/Ed448 sign/verify mutating XOF state.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-10 14:00:41 +03:00
Alexandru Ardelean
066225fb1e python3-cryptodome: update to 3.23.0
Update package to 3.23.0.

Changes since 3.18.0:

3.19.0: Added ECDH support via Crypto.Protocol.DH; TupleHash128/256
update() can now hash multiple items at once; fixed cffi bug on Windows
with Python 3.12+.

3.19.1 (security): Patched side-channel leakage in OAEP decryption that
could enable a Manger attack.

3.20.0: Added TurboSHAKE128 and TurboSHAKE256; added Crypto.Hash.new()
factory; AES-GCM support for PBES2/PKCS#8 containers; SHA-2/SHA-3 support
in PBKDF2 for key containers.

3.21.0: Added Curve25519/X25519 and Curve448/X448 support; added
PYCRYPTODOME_DISABLE_GMP env var; RSA keys for PSS can now be imported;
fixed Ed25519 point negation; dropped Python 3.5 support.

3.22.0: Added HPKE (RFC 9180) support; CCM cipher now enforces
nonce-length data limits; fixed RC4 infinite loop for data >4GB; fixed
invalid PEM file handling; dropped Python 3.6 support.

3.23.0: Added Key Wrap (KW/KWP, RFC 3394/5649/NIST SP 800-38F) cipher
modes; Windows ARM wheels; fixed HashEdDSA/Ed448 sign/verify mutating
XOF state.

Refresh 001-fix-libgmp-loading.patch and 002-omit-tests.patch for the
updated source (hunk offsets shifted by 2-4 lines due to new functions).

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-10 14:00:41 +03:00