Commit Graph

4803 Commits

Author SHA1 Message Date
Josef Schlehofer 2017ee63bb python-ubus: require only python-setuptools (not host) as build depends
In OpenWrt 24.10, there is no host build for python-setuptools.
Lets have only build dependency for python-setuptools.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2026-05-25 11:04:51 +02:00
Jens Wagner 915530a093 perl: fix missing line numbers in error messages
There were some type definitions missing in architecture.config,
that caused perl to return '%' instead of actual line numbers.

Fixes: https://github.com/openwrt/packages/issues/25912

Signed-off-by: Jens Wagner <jens@wagner2013.de>
(cherry picked from commit 95b7bf91a7)
2026-05-20 19:34:38 +02:00
Jens Wagner 899590b0fa perl: fix dependency issues in archive, pod and test
perlbase-archive, perlbase-pod and perlbase-test
had executable utilities with missing dependencies.

Fixes: https://github.com/openwrt/packages/issues/29425
Fixes: https://github.com/openwrt/packages/issues/29426
Fixes: https://github.com/openwrt/packages/issues/29427

As discussed in PR 29463
https://github.com/openwrt/packages/pull/29463

those are either non-working or useless on OpenWrt,
therefore they have been removed.

Signed-off-by: Jens Wagner <jens@wagner2013.de>
(cherry picked from commit 8c62419cd8)
2026-05-20 19:33:18 +02:00
Jens Wagner de444814a7 perl-net-async-http: Perl Module Net::Async::HTTP
This object class implements an asynchronous HTTP user agent
for the IO::Async framework in Perl, similar to LWP::UserAgent.

Signed-off-by: Jens Wagner <jens@wagner2013.de>
(cherry picked from commit 70f8dd8aa3)
2026-04-30 10:55:46 +02:00
Jens Wagner 4ee5e940e7 perl-io-async-ssl: Perl Module IO::Async::SSL
This module extends existing IO::Async classes with
methods to allow the use of SSL or TLS-based connections
Required be e.g. Net::Async::HTTP to support https://

Signed-off-by: Jens Wagner <jens@wagner2013.de>
(cherry picked from commit c30cec8144)
2026-04-30 10:55:46 +02:00
Jens Wagner dcb6cd702a perl-net-dns-sec: Perl Module Net::DNS::SEC
This module adds DNSSEC extensions to Net::DNS

Signed-off-by: Jens Wagner <jens@wagner2013.de>
(cherry picked from commit c4136bbc1a)
2026-04-30 10:55:46 +02:00
Jens Wagner 94fce46d0c perl-metrics-any: Perl Module Metrics::Any
Provides a central location for modules to report monitoring metrics.
Required e.g. by Net::Async::HTTP

Signed-off-by: Jens Wagner <jens@wagner2013.de>
(cherry picked from commit f9aada2b27)
2026-04-30 10:55:46 +02:00
Jens Wagner bad03e1cc3 perl-io-async: Perl Module IO::Async
Asynchronous event-driven programming in Perl

Signed-off-by: Jens Wagner <jens@wagner2013.de>
(cherry picked from commit e74e9710bc)
(cherry picked from commit 594657b149)
2026-04-30 10:55:46 +02:00
Jens Wagner 30c2f1f4e3 perl-future-asyncawait: Perl Module Future::AsyncAwait
Povides a deferred subroutine syntax for futures in Perl

Signed-off-by: Jens Wagner <jens@wagner2013.de>
(cherry picked from commit 62e5e1f82f)
(cherry picked from commit 3a2ce3480c)
2026-04-30 10:55:46 +02:00
Jens Wagner 7262505ec5 perl-future: Perl Module Future
Perl Future objects represent an operation awaiting completion

Signed-off-by: Jens Wagner <jens@wagner2013.de>
(cherry picked from commit 8a235d67b6)
(cherry picked from commit 3ea60604f1)
2026-04-30 10:55:46 +02:00
Jens Wagner 74a46b9d89 perl-io-socket-ssl: Perl Module IO::Socket::SSL
SSL sockets with IO::Socket interface in Perl

Signed-off-by: Jens Wagner <jens@wagner2013.de>
(cherry picked from commit c10d0d2c66)
(cherry picked from commit fa6c3dbe32)
2026-04-30 10:55:46 +02:00
Jens Wagner 970af0a767 perl-net-ssleay: Perl Module Net::SSLeay
Perl bindings for OpenSSL and LibreSSL

Signed-off-by: Jens Wagner <jens@wagner2013.de>
(cherry picked from commit e35fe955d8)
(cherry picked from commit e168d9fdfb)
2026-04-30 10:55:46 +02:00
Jens Wagner a5b22f3919 perl-file-sharedir: Perl Module File::ShareDir
Perl module to locate per-dist and per-module shared files

Signed-off-by: Jens Wagner <jens@wagner2013.de>
(cherry picked from commit 71581bf947)
(cherry picked from commit 3dd5052390)
2026-04-30 10:55:46 +02:00
Jens Wagner 62953354ad perl-class-inspector: Perl Module Class::Inspector
Get information about a Perl class and its structure

Signed-off-by: Jens Wagner <jens@wagner2013.de>
(cherry picked from commit 1bc3bf261b)
(cherry picked from commit bf5002488f)
2026-04-30 10:55:46 +02:00
Jens Wagner 163ea3febb perl-struct-dumb: Perl Module Struct::Dumb
Perl module to make simple lightweight record-like structures

Signed-off-by: Jens Wagner <jens@wagner2013.de>
(cherry picked from commit d824ce3137)
(cherry picked from commit ec90c9fe90)
2026-04-30 10:55:46 +02:00
Jens Wagner ce64f96476 perl-xs-parse-sublike: Perl Module XS::Parse::Sublike
Perl XS functions to assist in parsing sub-like syntax

Signed-off-by: Jens Wagner <jens@wagner2013.de>
(cherry picked from commit 9cab02e71f)
(cherry picked from commit 79725e5c61)
2026-04-30 10:55:46 +02:00
Jens Wagner 3f4fee794d perl-xs-parse-keyword: Perl Module XS::Parse::Keyword
Perl XS functions to assist in parsing keyword syntax

Signed-off-by: Jens Wagner <jens@wagner2013.de>
(cherry picked from commit c46536d76f)
(cherry picked from commit d09299c2b6)
2026-04-30 10:55:46 +02:00
Erik Larsson 88c13ad8fe python3-ubus: update to 0.1.3
Bump to version 0.1.3 and drop patch, which is in upstream.

Signed-off-by: Erik Larsson <who+github@cnackers.org>
(cherry picked from commit fee669b6d4)
2026-04-28 23:16:20 +02:00
Alexandru Ardelean e0331d82fe python-ubus: backport patch for newer Python
Build is failing for a while now with error:
```
14.3.0_musl/usr/include -I/builder/shared-workdir/build/sdk/staging_dir/toolchain-mipsel_24kc_gcc-14.3.0_musl/include -I/builder/shared-workdir/build/sdk/staging_dir/toolchain-mipsel_24kc_gcc-14.3.0_musl/include/fortify -I/builder/shared-workdir/build/sdk/staging_dir/target-mipsel_24kc_musl/usr/include/python3.14 -fPIC -I/builder/shared-workdir/build/sdk/staging_dir/target-mipsel_24kc_musl/usr/include/python3.14 -c ./ubus_python.c -o build/temp.linux-mipsel-cpython-314/ubus_python.o
./ubus_python.c: In function 'ubus_python_add':
./ubus_python.c:1081:17: error: implicit declaration of function 'PyEval_CallMethod'; did you mean 'PyObject_CallMethod'? [-Wimplicit-function-declaration]
 1081 |                 PyEval_CallMethod(python_alloc_list, "pop", "");
      |                 ^~~~~~~~~~~~~~~~~
      |                 PyObject_CallMethod
error: command '/builder/shared-workdir/build/sdk/staging_dir/toolc
```

This has been fixed on version 0.1.3, but that hasn't been
published to pypi yet.

Also add test.sh

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
(cherry picked from commit 29e685e1f8)
2026-04-28 23:16:20 +02:00
Josef Schlehofer 78c897533d python-msgpack: update to version 1.1.0
Release notes:
https://github.com/msgpack/msgpack-python/releases/tag/v1.0.8
https://github.com/msgpack/msgpack-python/releases/tag/v1.1.0

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2026-04-27 13:58:10 +02:00
Josef Schlehofer 3b0463a784 python-zope-{event,interface}: drop python-setuptools/host dependency
While backporting commits from master, it was overlooked that OpenWrt 24.10
does not have python-setuptools/host, but only python-setuptools, so we can
depend on that instead.

Fixes:
```
WARNING: Makefile 'package/feeds/packages/python-zope-event/Makefile' has a build dependency on 'python-setuptools/host', which does not exist
WARNING: Makefile 'package/feeds/packages/python-zope-interface/Makefile' has a build dependency on 'python-setuptools/host', which does not exist
```

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2026-04-27 12:19:10 +02:00
Alexandru Ardelean 32d1925997 python3-flask-httpauth: update to 4.8.1
Update package to 4.8.1.

Security fix:
- Empty or missing tokens are no longer accepted; previously this could
  allow bypassing token authentication

Documentation improvements: new installation section, revised docs, fixed
broken links.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
(cherry picked from commit bf34f9abb4)
2026-04-27 10:24:28 +02:00
Rosen Penev 707ebcf55b python-gevent: use LF for Makefile
Done with all other Makefiles.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 126562da30)
2026-04-27 10:23:40 +02:00
Rosen Penev e2f928bcdc python-gevent: update to 25.9.1
Fixes compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 1d3b5f7791)
2026-04-27 10:23:34 +02:00
Hirokazu MORIKAWA 4f80e67a71 node: bump to 20.20.2
This is a security release.
Notable Changes
* (CVE-2026-21717) fix array index hash collision (Joyee Cheung)
* (CVE-2026-21713) use timing-safe comparison in Web Cryptography HMAC and KMAC (Filip Skokan)
* (CVE-2026-21710) use null prototype for headersDistinct/trailersDistinct (Matteo Collina)
* (CVE-2026-21716) include permission check on lib/fs/promises (RafaelGSS)pull/795>
* (CVE-2026-21715) add permission check to realpath.native (RafaelGSS)
* (CVE-2026-21714) handle NGHTTP2_ERR_FLOW_CONTROL error code (RafaelGSS)
* (CVE-2026-21637) wrap SNICallback invocation in try/catch (Matteo Collina)

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2026-04-05 15:23:22 +02:00
Orne Brocaar 0816e4806a rust: set llvm.download-ci-llvm=false
These LLVM builds get deleted after a certain time, causing Rust builds
to break as the LLVM build can no longer be downloaded.

Fixes #27331.

Signed-off-by: Orne Brocaar <info@brocaar.com>
(cherry picked from commit 4c3a649dd7)
2026-04-02 09:40:54 +08:00
Tianling Shen 308f24f706 rust: Update to 1.90.0
Release note: https://blog.rust-lang.org/2025/09/18/Rust-1.90.0/

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 4c8c41c023)
2026-02-06 09:52:49 +08:00
Daniel F. Dickinson 51d68aacd9 python-passlib: remove unmaintained package
passlib is unmaintained since 2020 and a maintained fork called libpass,
which is a drop-in replacement (even using the passlib module name), is
now available. https://github.com/Kozea/Radicale/issues/1952 has more
information.

Therefore we remove the python-passlib package from this repo.

Signed-off-by: Daniel F. Dickinson <dfdpublic@wildtechgarden.ca>
(cherry picked from commit 3de4d24830)
2026-01-23 15:23:47 +07:00
Daniel F. Dickinson e5fc7da090 python-libpass: add replacement for passlib
passlib has not be updated since 2020 and is therefore a dead project.
Radicale (used in this repo as radicale3) has updated to use libpass (a
maintained fork of passlib): https://github.com/Kozea/Radicale/pull/1953
therefore add python3-libpass to provide libpass, a drop-in replacement
for passlib, and a dependency for Radicale v3.6.0.

Signed-off-by: Daniel F. Dickinson <dfdpublic@wildtechgarden.ca>
(cherry picked from commit ead09d5fd9)
2026-01-23 15:23:47 +07:00
Josef Schlehofer a6a55873f6 python-pika: add new package for radicale3
Pika is a pure-Python implementation of the AMQP 0-9-1 protocol that
tries to stay fairly independent of the underlying network support
library.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit d8437af213)
2026-01-23 15:23:47 +07:00
Hirokazu MORIKAWA 9788d496a6 node: january 13, 2026 Security Releases
This is a security release.
Notable Changes
* (CVE-2025-55132) disable futimes when permission model is enabled (RafaelGSS) nodejs-private/node-private#802
* (CVE-2025-59465) add TLSSocket default error handler (RafaelGSS) nodejs-private/node-private#797
lib,permission:
* (CVE-2025-55130) require full read and write to symlink APIs (RafaelGSS) nodejs-private/node-private#760
src:
* (CVE-2025-59466) rethrow stack overflow exceptions in async_hooks (Matteo Collina) nodejs-private/node-private#773
src,lib:
* (CVE-2025-55131) refactor unsafe buffer creation to remove zero-fill toggle (Сковорода Никита Андреевич) nodejs-private/node-private#759
tls:
* (CVE-2026-21637) route callback exceptions through error handlers (Matteo Collina) nodejs-private/node-private#796

add patch, address llhttp build failure on armv7

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2026-01-22 15:31:44 +02:00
Alexandru Ardelean 760e1234fe pymysql: bump to version 1.1.2
Also fixes error with wheel file name.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
(cherry picked from commit 1c88e9fc8a)
2025-12-31 13:11:55 +01:00
Josef Schlehofer 5dbedc7ae0 django: add PYPI_SOURCE_NAME
Wheel and tarball on PyPI is according to PEP 625,
so the naming should be in the lowercase.
Right now, build system was looking for Django.

Fixes:
```
+ curl -f --connect-timeout 20 --retry 5 --location https://files.pythonhosted.org/packages/source/D/Django/Django-5.1.14.tar.gz
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed

  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
curl: (22) The requested URL returned error: 404
Download failed.
+ curl -f --connect-timeout 20 --retry 5 --location https://sources.cdn.openwrt.org/Django-5.1.14.tar.gz
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed

  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
curl: (22) The requested URL returned error: 404
Download failed.
+ curl -f --connect-timeout 20 --retry 5 --location https://sources.openwrt.org/Django-5.1.14.tar.gz
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed

  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
curl: (22) The requested URL returned error: 404 Not Found
Download failed.
+ curl -f --connect-timeout 20 --retry 5 --location https://mirror2.openwrt.org/sources/Django-5.1.14.tar.gz
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed

  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
curl: (22) The requested URL returned error: 404 Not Found
Download failed.
No more mirrors to try - giving up.
```

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2025-12-31 13:10:51 +01:00
Josef Schlehofer 8d48b87b9f luajit2: add riscv64 support
This adds support RISC-V64 to luajit2 by backporting
https://redirect.github.com/openresty/luajit2/pull/236

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 47525f3300)
2025-12-29 12:52:40 +01:00
Javier Marcet cded179881 luajit2: update to v2.1-20251030
For changes, see tagged commit:
https://github.com/openresty/luajit2/releases/tag/v2.1-20251030

Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit 6d57246e48)
2025-12-29 10:12:24 +01:00
Javier Marcet 858f80cd83 luajit2: update to v2.1-20250826
For changes, see tagged commit:
https://github.com/openresty/luajit2/releases/tag/v2.1-20250826

Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit 87618e378a)
2025-12-29 10:12:24 +01:00
Josef Schlehofer fac6812eeb python-sqlalchemy: update to version 2.0.35
Release notes:
https://docs.sqlalchemy.org/en/20/changelog/changelog_20.html#change-2.0.35

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2025-12-29 09:58:35 +01:00
Josef Schlehofer 45a7df42d0 python-pyopenssl: update to version 24.2.1
Release notes:
https://github.com/pyca/pyopenssl/releases/tag/24.2.1

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2025-12-29 09:58:35 +01:00
Josef Schlehofer 739d60f497 python-pynacl: update to version 1.6.0
Release notes:
https://github.com/pyca/pynacl/releases/tag/1.6.0

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2025-12-29 09:58:35 +01:00
Josef Schlehofer c3dad539f4 python-jinja2: update to version 3.1.4
Release notes:
https://jinja.palletsprojects.com/en/stable/changes/#version-3-1-4

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2025-12-29 09:58:35 +01:00
Josef Schlehofer 636eb9049e python-babel: update to version 2.15.0
Release notes:
https://github.com/python-babel/babel/releases/tag/v2.15.0

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2025-12-29 09:58:35 +01:00
Josef Schlehofer b7033c0b2a pillow: update to version 10.2.0
Release notes:
https://github.com/python-pillow/Pillow/blob/10.2.0/CHANGES.rst

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2025-12-29 09:58:35 +01:00
Josef Schlehofer db97af78f3 python-werkzeug: update to version 2.3.8
Release notes:
https://werkzeug.palletsprojects.com/en/stable/changes/#version-2-3-8

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2025-12-29 09:58:35 +01:00
Josef Schlehofer a4c0226907 Flask: update to version 2.3.3
Release notes:
https://flask.palletsprojects.com/en/stable/changes/#version-2-3-3

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2025-12-29 09:58:35 +01:00
Josef Schlehofer a09779d22b python-markdown: update to version 3.7
Release notes:
https://python-markdown.github.io/changelog/

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2025-12-29 09:58:35 +01:00
Josef Schlehofer 61d3d57a47 treewide: wheel names are in lowercase (PEP 625)
Since setuptools 69.3.0, it supports PEP625,
based on this, package name and as well,
the wheel should used lowercase instead of uppercase
and also dots (.) should use underscore (_)

More details can be found here:
https://discuss.python.org/t/amending-pep-427-and-pep-625-on-package-normalization-rules/17226

Fixes:
```
Successfully built flask-2.0.2-py3-none-any.whl
Traceback (most recent call last):
  File "<frozen runpy>", line 198, in _run_module_as_main
  File "<frozen runpy>", line 88, in _run_code
  File "/builder/shared-workdir/build/sdk/staging_dir/hostpkg/lib/python3.11/site-packages/installer/__main__.py", line 98, in <module>
    _main(sys.argv[1:], "python -m installer")
  File "/builder/shared-workdir/build/sdk/staging_dir/hostpkg/lib/python3.11/site-packages/installer/__main__.py", line 86, in _main
    with WheelFile.open(args.wheel) as source:
  File "/builder/shared-workdir/build/sdk/staging_dir/target-aarch64_cortex-a53_musl/usr/lib/python3.11/contextlib.py", line 137, in __enter__
    return next(self.gen)
           ^^^^^^^^^^^^^^
  File "/builder/shared-workdir/build/sdk/staging_dir/hostpkg/lib/python3.11/site-packages/installer/sources.py", line 162, in open
    with zipfile.ZipFile(path) as f:
         ^^^^^^^^^^^^^^^^^^^^^
  File "/builder/shared-workdir/build/sdk/staging_dir/target-aarch64_cortex-a53_musl/usr/lib/python3.11/zipfile.py", line 1311, in __init__
    self.fp = io.open(file, filemode)
              ^^^^^^^^^^^^^^^^^^^^^^^
FileNotFoundError: [Errno 2] No such file or directory: '/builder/shared-workdir/build/sdk/build_dir/target-aarch64_cortex-a53_musl/pypi/Flask-2.0.2//openwrt-build/Flask-2.0.2-*.whl'
```

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2025-12-29 09:58:35 +01:00
Michael Heimpold 5b345d7596 php8: update to 8.3.29
This fixes:
    - CVE-2025-14177
    - CVE-2025-14178
    - CVE-2025-14180

Upstream changelog:
https://www.php.net/ChangeLog-8.php#8.3.29

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2025-12-24 01:58:19 +02:00
Luiz Angelo Daros de Luca 953b6d47b4 ruby: update to 3.3.10
This release includes some general fixes and a uri gem security fix:

- CVE-2025-61594: URI Credential Leakage Bypass previous fixes

Changelog: https://github.com/ruby/ruby/releases/tag/v3_3_10
Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2025-12-18 13:48:52 +02:00
Josef Schlehofer 07cedfe325 python-ruamel-yaml: update to version 0.18.16
Release notes can be found here:
https://yaml.dev/doc/ruamel-yaml/

Wheel is compiled as ruamel_yaml (underscore), but on pypi it is ruamel.yaml (dot),
it failed on buildbot, so add slight tweak.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 974e8404c6)
2025-12-06 14:15:33 +01:00
Alexandru Ardelean 2ab7c24e28 python-automat: bump to version 25.4.16
Patches can be dropped.
They don't seem to be needed anymore.
The 'visualize' parts seem to be optional.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
(cherry picked from commit 974dc9753c)
2025-12-04 22:07:35 +01:00