Commit Graph

5298 Commits

Author SHA1 Message Date
George Sapkin d9fdda8cf2 golang: add a simple compilation test
Add a simple CI compilation test to ensure that the Go toolchain is
functional.

Signed-off-by: George Sapkin <george@sapk.in>
2026-05-14 00:24:08 +03:00
George Sapkin 13dfad0879 golang: bump 1.26 to 1.26.3
Fixes: CVE-2026-27142
Fixes: CVE-2026-39836
Fixes: CVE-2026-42501
Changes: https://github.com/golang/go/issues?q=milestone%3AGo1.26.3+label%3ACherryPickApproved
Signed-off-by: George Sapkin <george@sapk.in>
2026-05-14 00:24:08 +03:00
George Sapkin 6886c135f3 python-platformio: fix host build
Fix bottle dependency.

Fixes: e15bac97 ("python-platformio: add target package")
Signed-off-by: George Sapkin <george@sapk.in>
2026-05-13 23:02:33 +03:00
George Sapkin 578b7e3dea python-wsproto: fix host build
Add missing includes.

Fixes: b12e18eb ("python-wsproto: add host package")
Signed-off-by: George Sapkin <george@sapk.in>
2026-05-13 23:02:33 +03:00
George Sapkin 288d8e8942 python-h11: fix host build
Add missing includes.

Fixes: 0a75ad1e ("python-h11: add host package")
Signed-off-by: George Sapkin <george@sapk.in>
2026-05-13 23:02:33 +03:00
George Sapkin 9a04293388 python3-bottle: fix host build
Add missing includes.

Fixes: 9ff014b4 ("python3-bottle: add host package")
Signed-off-by: George Sapkin <george@sapk.in>
2026-05-13 23:02:33 +03:00
George Sapkin 02221e455b python-protobuf: add new package
Add Protobuf Python package.

Signed-off-by: George Sapkin <george@sapk.in>
2026-05-13 20:57:12 +03:00
George Sapkin e15bac9722 python-platformio: add target package
Remove host-only build and add source package.

Adding missing ajsonrpc dependency to PlatformIO.

Link: https://github.com/search?q=repo%3Aplatformio%2Fplatformio-core%20ajsonrpc&type=code
Signed-off-by: George Sapkin <george@sapk.in>
2026-05-12 11:08:25 +03:00
George Sapkin b12e18eb00 python-wsproto: add host package
Add host package necessary for python-platformio/host.

Signed-off-by: George Sapkin <george@sapk.in>
2026-05-12 11:08:25 +03:00
George Sapkin 072fde3b5e python-uvicorn: add new package
Uvicorn is an ASGI web server implementation for Python.

Signed-off-by: George Sapkin <george@sapk.in>
2026-05-12 11:08:25 +03:00
George Sapkin 54d7e96030 python-starlette: add new package
Starlette is a lightweight ASGI framework/toolkit, which is ideal for
building async web services in Python.

Signed-off-by: George Sapkin <george@sapk.in>
2026-05-12 11:08:25 +03:00
George Sapkin aeef8245ad python-semantic-version: add target package
Remove host-only build.

Signed-off-by: George Sapkin <george@sapk.in>
2026-05-12 11:08:25 +03:00
George Sapkin 92e9b7e5eb python-marshmallow: add new package
A lightweight library for converting complex datatypes to and from native
Python datatypes.

Signed-off-by: George Sapkin <george@sapk.in>
2026-05-12 11:08:25 +03:00
George Sapkin 0a75ad1e22 python-h11: add host package
Add host package necessary for python-uvicorn/host.

Signed-off-by: George Sapkin <george@sapk.in>
2026-05-12 11:08:25 +03:00
George Sapkin 9ff014b4fa python3-bottle: add host package
Add host package necessary for python-platformio/host.

Signed-off-by: George Sapkin <george@sapk.in>
2026-05-12 11:08:25 +03:00
George Sapkin 71be202c45 python-anyio: add new package
High-level concurrency and networking framework on top of asyncio or Trio.

Signed-off-by: George Sapkin <george@sapk.in>
2026-05-12 11:08:25 +03:00
George Sapkin d43869fbbc python-ajsonrpc: add new package
Lightweight JSON-RPC 2.0 protocol implementation and asynchronous server
powered by asyncio. This library is a successor of json-rpc and written
by the same team.

Signed-off-by: George Sapkin <george@sapk.in>
2026-05-12 11:08:25 +03:00
Alexandru Ardelean d414c51b58 micropython-lib: update to 1.28.0, add test.sh
micropython-lib is a companion repository to micropython, versioned in
lockstep. Both are now at 1.28.0 (released 2026-04-06).

The 001-build-unix-ffi.patch remains needed as the upstream has not yet
incorporated the --unix-ffi argument into the tools/build.py script.

test.sh:
- micropython-lib: verify stdlib-replacement modules (collections,
  functools, base64) can be imported via the /usr/lib/micropython path
- micropython-lib-unix: verify the micropython-unix wrapper script exists
  and that sqlite3/select are importable via the unix-ffi path

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-05-11 14:58:59 +03:00
Alexandru Ardelean cf71b42c4b micropython: update to 1.28.0
Changes since 1.27.0:
- New machine.CAN class with bindings for the stm32 port; support across
  all ports to follow
- machine.PWM support added to stm32 and alif ports, completing coverage
  of all Tier 1/2 MCU-based ports
- Template strings (t-strings, PEP 750) added at the "full feature" level
- weakref module added with weakref.ref and weakref.finalize classes
- f-strings now support nested f-strings within expressions
- Optimisations to native emitter; new RISC-V Zcmp arch flag for RV32
- extmod.mk: add extmod/machine_can.c (shifts the mbedtls hunk by 1 line;
  update 040-extmod-use-external-mbedtls.patch accordingly)

micropython-lib is updated in lockstep in a separate commit.

Ref: https://github.com/micropython/micropython/releases/tag/v1.28.0
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-05-11 14:58:59 +03:00
Jianhui Zhao 9f5146f678 lua-eco: update to 4.0.0
changelog: https://github.com/zhaojh329/lua-eco/releases/tag/v4.0.0

Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>
2026-05-11 14:39:57 +03:00
Josef Schlehofer 5120ed91b8 flup: remove the package
Flup was heavily used in downstream distribution (Turris OS)
for their Web UI - reForis. Since there are no other
dependent packages in this repository, Flup is no longer needed.

The package appears to be abandoned and is no longer maintained
The latest version dates back to 2009.

It was previously required for Seafile.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2026-05-10 11:33:52 +03:00
Alexandru Ardelean 21df5ff4b5 erlang: update to 28.5
Upstream release 28.5 (2026-04-23), patch release for OTP 28.

Applications updated:
- erl_interface-5.7: new --{enable,disable}-use-embedded-3pp-alternatives
  configure option; allows using system zstd, zlib, ryu, openssl, tcl
  instead of bundled copies (default: zlib uses OS version if available)
- erts-16.4: fixed bug in enif_make_map_from_arrays for arrays with >= 33
  keys (duplicates could produce broken maps); fixed Unicode handling in
  erl.exe args_file on Windows
- mnesia-4.25.3: bug fixes
- ssl-11.6: bug fixes

Highlight: new "Secure Coding Guidelines" document added to Design
Principles describing how to write secure Erlang code.

Reference: https://github.com/erlang/otp/releases/tag/OTP-28.5

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-05-10 11:31:30 +03:00
Yanase Yuki b0d8a3d384 treewide: cleanup URLs
This commit converts plain HTTP URLs to HTTPS, and updates
old or outdated URLs.

Signed-off-by: Yanase Yuki <dev@zpc.st>
2026-05-08 22:28:27 +02:00
Jianhui Zhao 5e70ed855f lua-ffi: update to 1.2.0
changelog: https://github.com/zhaojh329/lua-ffi/releases/tag/v1.2.0

Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>
2026-05-07 18:36:34 +03:00
Alexandru Ardelean a3d2536eb0 lua-openssl: fix Lua detection with CMake 4.3
FindLuaJIT.cmake uses NO_DEFAULT_PATH and only searches hardcoded
luajit-specific paths, so it never finds regular Lua. However if
LUAJIT_INCLUDE_DIRS and LUAJIT_LIBRARY are pre-set in the CMake
cache, find_path/find_library skip their searches, the module sets
LUAJIT_FOUND=ON and also sets LUA_INCLUDE_DIR/LUA_LIBRARIES from
those values, and the if(NOT LUAJIT_FOUND) guard skips the broken
find_package(Lua REQUIRED) call that fails under CMake 4.3.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-05-04 19:26:53 +03:00
Alexandru Ardelean badbdbef9f python-semanage: update to 3.10
Changes in 3.10:
- improve semanage man pages: add examples for -r RANGE flag usage
- semanage: reset active value when deleting boolean customizations
- various libsemanage/libsepol bug fixes and security hardening

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-05-01 21:01:30 +03:00
Alexandru Ardelean 381e4f41ba python-selinux: update to 3.10
Changes in 3.10:
- fix parsing of the enforcing kernel cmdline parameter
- build python module without isolation (Makefile fix)
- treewide: add .clang-format configuration file
- various libsepol bug fixes (NULL deref, use-after-free, MLS range
  validation, functionfs_seclabel policycap, bpf_token_perms polcap)

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-05-01 21:01:30 +03:00
Alexandru Ardelean 8238e4ddfa lua-openssl: fix CMake Lua detection in build
The CMakeLists.txt first tries FindLuaJIT.cmake which uses
NO_DEFAULT_PATH with hardcoded host paths, so it always fails in
cross-compilation. The fallback find_package(Lua REQUIRED) may also
fail to find a flat sysroot layout where lua.h lives at
/usr/include/lua.h rather than a versioned subdirectory.

Explicitly pass LUA_INCLUDE_DIR and LUA_LIBRARY to CMake to bypass
both finders, and depend on +liblua (the library package) instead of
+lua to ensure Build/InstallDev runs and Lua headers are present in
the staging directory before this package builds.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-30 17:42:26 +03:00
Erik Larsson fee669b6d4 python3-ubus: update to 0.1.3
Bump to version 0.1.3 and drop patch, which is in upstream.

Signed-off-by: Erik Larsson <who+github@cnackers.org>
2026-04-28 23:12:28 +02:00
Alexandru Ardelean 3a11691a19 python-zope-event: fix build with setuptools >= 81
The pyproject.toml for zope.event 6.1 specifies a strict build
dependency of setuptools>=78.1.1,<81. We currently package
setuptools>=81, causing pip to report a missing dependency and
fail the build.

Add patch 001-relax-setuptools-version.patch to drop the <81 upper
bound, allowing the package to build with any recent setuptools.

Add test.sh to verify the installed version and exercise the core
event API (subscribers list, notify(), event dispatch).

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-27 08:25:02 +03:00
Amnon Paz b1a49e6ca3 lua-openssl: update to 0.11.1
Update Makefile with the version
Remove LuaJIT fix patch - No longer needed
Add "ts-time-cb-signature" patch - Fixes build on various platforms

Signed-off-by: Amnon Paz <pazamnon@gmail.com>
2026-04-26 09:43:24 +03:00
Alexandru Ardelean acfafdaa03 python-semanage: fix cross-compilation, add test.sh
Add HOST_PYTHON3_PIP_VARS and --no-build-isolation to MAKE_VARS.
Without --no-build-isolation, pip creates an isolated build environment
which fails during cross-compilation because _sysconfigdata is missing.
Aligns with python-selinux which already has this fix.

The libsemanage pywrap uses the host Python's EXT_SUFFIX to name the
C extension, so we will use the PYCEXT env-var to correct that.

Add basic test.sh to verify the semanage Python bindings load correctly
in environments without SELinux kernel support.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-25 07:48:58 +03:00
Alexandru Ardelean e2e727e686 python-selinux: fix cross-compilation, add test.sh
Add --no-build-isolation to PYTHON_SETUP_ARGS. Without it, pip creates
an isolated build environment which fails during cross-compilation
because _sysconfigdata is missing for the target arch.

Add test.sh with basic import and API sanity checks.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-25 07:48:58 +03:00
Alexandru Ardelean ccd69a148f python3-django-cors-headers: update to 4.9.0; add test.sh
Major changes since 3.10.0:

4.0:
- add CORS_ALLOW_PRIVATE_NETWORK setting for Local Network Access spec support
- add async middleware support, reducing overhead on async views
- remove deprecated CORS_REPLACE_HTTPS_REFERER and CorsPostCsrfMiddleware
- remove three header names from default allowed list (accept-encoding, dnt, origin)

4.3:
- fix access-control-allow-credentials header not being omitted on
  non-allowed responses

4.6:
- drop support for Django 3.2 through 4.1

4.9:
- add Django 6.0 support
- tighten validation of sequence-type settings (e.g. CORS_ALLOW_METHODS)

Add PYPI_SOURCE_NAME:=django_cors_headers as the 4.x sdist uses
underscores in the filename.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-21 12:35:08 +03:00
Alexandru Ardelean 970bbeb3b5 vobject: update to 0.9.9; add test.sh
Changelog since 0.9.6.1:
- add product version number to the PRODID tag in iCalendar output
- add support for GEO tags in vCards
- various bugfixes and compatibility improvements

Also need to update setup.cfg at build time to insert the version
to allow the package to build.
Otherwise we get
```
2026-04-21T08:17:17.9341927Z   File "/builder/staging_dir/hostpkg/lib/python3.14/site-packages/setuptools/config/setupcfg.py", line 296, in __setitem__
2026-04-21T08:17:17.9342520Z     parsed = self.parsers.get(option_name, lambda x: x)(value)
2026-04-21T08:17:17.9343117Z   File "/builder/staging_dir/hostpkg/lib/python3.14/site-packages/setuptools/config/setupcfg.py", line 602, in _parse_version
2026-04-21T08:17:17.9343777Z     return expand.version(self._parse_attr(value, self.package_dir, self.root_dir))
2026-04-21T08:17:17.9344201Z                           ~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
2026-04-21T08:17:17.9344938Z   File "/builder/staging_dir/hostpkg/lib/python3.14/site-packages/setuptools/config/setupcfg.py", line 421, in _parse_attr
2026-04-21T08:17:17.9345544Z     return expand.read_attr(attr_desc, package_dir, root_dir)
2026-04-21T08:17:17.9345876Z            ~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
2026-04-21T08:17:17.9346409Z   File "/builder/staging_dir/hostpkg/lib/python3.14/site-packages/setuptools/config/expand.py", line 191, in read_attr
2026-04-21T08:17:17.9346947Z     return getattr(module, attr_name)
2026-04-21T08:17:17.9347261Z AttributeError: module 'vobject' has no attribute 'VERSION'
2026-04-21T08:17:17.9598878Z
```

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-21 12:35:08 +03:00
Alexandru Ardelean 8acd8b8d13 numpy: update to 2.4.4
Patch release with stability and correctness fixes over 2.4.3:
- fix memory leak in certain array creation paths
- fix thread-safety issues in ufunc dispatch
- fix hash collisions in np.isin() on certain inputs
- fix OpenBLAS threading hang on ARM targets
- miscellaneous annotation and documentation improvements

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-21 12:35:08 +03:00
Alexandru Ardelean c391447d12 python-flask-babel: update to 4.0.0; add test.sh
Changes since 3.1.0:
- drop Python 3.7 support; add PyPy 3.9 compatibility
- replace deprecated locked_cached_property with cached_property

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-21 11:41:26 +03:00
Wei-Ting Yang 2a998b61db python-chardet: update license to 0BSD
Upstream changed the project license to 0BSD.

Signed-off-by: Wei-Ting Yang <williamatcg@gmail.com>
2026-04-21 11:00:30 +03:00
Alexandru Ardelean 0f833b1b9c python3-drf-nested-routers: update to 0.95.0; add test.sh
Add PYPI_SOURCE_NAME:=drf_nested_routers as the 0.95.0 sdist
uses underscores in the filename.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-18 08:07:33 +03:00
Alexandru Ardelean aa318c2850 python-pyroute2: update to 0.9.6
- bump 0.9.5 -> 0.9.6

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-18 08:07:33 +03:00
Alexandru Ardelean f707890afb python-awscli: update to 1.44.79
- bump 1.44.78 -> 1.44.79

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-18 08:07:33 +03:00
Alexandru Ardelean e18923ab66 itsdangerous: update to 2.2.0; add test.sh
- bump 2.1.2 -> 2.2.0
- add test.sh

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-18 08:07:33 +03:00
Alexandru Ardelean 34717c6bce python-installer: use --prefix for install-path
Fixes https://github.com/openwrt/packages/issues/29177
Tested locally.

Fix provided by @xuanranran

Signed-off-by: Lovin Yarn <juanshengyuan@gmail.com>
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-17 19:44:51 +03:00
Alexandru Ardelean bff9781478 python-pypubsub: update to 4.0.7
- bump 4.0.3 -> 4.0.7
- add python-setuptools-scm/host to PKG_BUILD_DEPENDS
- add test.sh

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-17 19:06:09 +03:00
Alexandru Ardelean a8ddfaf5b3 python-dbus-fast: update to 4.0.4
- bump 2.21.1 -> 4.0.4
- remove over-specified runtime dependencies; 4.0.x has no runtime
  Python dependencies beyond python3-light
- add test.sh

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-17 19:06:09 +03:00
Alexandru Ardelean 30535ff1a9 python-lru-dict: update to 1.4.1; add test.sh
Add PYPI_SOURCE_NAME:=lru_dict as the sdist tarball filename
uses underscores while PYPI_NAME uses hyphens.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-17 13:46:59 +03:00
Alexandru Ardelean baf4673b6a python-editables: update to 0.6
- bump 0.5 -> 0.6

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-17 13:46:59 +03:00
Alexandru Ardelean fa912f32d9 python-chardet: update to 7.4.3
- bump 7.4.1 -> 7.4.3

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-17 13:46:59 +03:00
Alexandru Ardelean c4eee29713 python-botocore: update to 1.42.89
- bump 1.42.88 -> 1.42.89

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-17 13:46:59 +03:00
Alexandru Ardelean aab93a917f python-boto3: update to 1.42.89
- bump 1.42.88 -> 1.42.89

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-17 13:46:59 +03:00