Commit Graph

36004 Commits

Author SHA1 Message Date
Alexandru Ardelean
e0a12562b7 python3: merge python3-email into python3-urllib
As we're seeing in various test.sh scrip runs, importing 'email' fails
with not finding 'urllib' and vice-versa.

Then via a7e96ec91 ("python3-email: add python3-urllib as dependency")
I created a circular dependency.
So, might as well merge the two packages into one (named python3-urllib)
and updates all dependencies to pull python3-urllib.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-04 18:27:26 +03:00
Alexandru Ardelean
e85084314c fail2ban: drop python3-pkg-resources dependency
The python3-pkg-resources package does not exist in OpenWrt.
The only distutils/setuptools usage in fail2ban 1.1.0 is in
filterpyinotify.py and filtersystemd.py, both of which are
optional backends not available on OpenWrt. They are loaded
lazily via ImportError-guarded calls and the default auto
backend falls through to polling without them.

Also add test.sh with basic import and CLI smoke test.

Add me as maintainer.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-04 06:36:47 +03:00
Alexandru Ardelean
46c35610db setools: bump to 4.6.0
Fix dependency with python3-pkg-resources (it got removed).
And add test.sh

- Bump from 4.5.1 to 4.6.0
- Drop python3-pkg-resources dependency: setools uses
  'from importlib import resources as pkg_resources' which is stdlib,
  not the external pkg_resources package
- Update 010-no-gui.patch: pyproject.toml now manages script-files and
  package-data (was setup.py in 4.5.1); rewrite patch to target it
- Update 030-remove-host-paths.patch: lib_dirs now uses list[str] type
  hint; fix hunk header line numbers to match new upstream layout
- Add test.sh: verify core query classes (SELinuxPolicy, BoolQuery,
  TypeQuery, RoleQuery, UserQuery) are accessible

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-04 06:36:47 +03:00
Fabrice Fontaine
8c583808c7 utils/beep: assign PKG_CPE_ID
cpe:/a:beep_project:beep is the correct CPE ID for beep:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:beep_project:beep

Indeed, spkr-beep is a fork of https://github.com/johnath/beep as
clearly stated in README.md: "This version of beep has been forked from
Johnathan Nightingales' original beep when johnath/beep#11 required
fixes in 2018, while Johnathan Nightingales' github.com/johnath/beep/
and johnath.com/beep/ was only maintained from around 2000 until around
2013.

So, it is still appropriate to use beep_project:beep CPE ID since the
code base remains the same and no new CPE has been assigned to the fork
(as there have been no new CVEs since 2018).

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
2026-04-03 22:24:03 +03:00
Jianhui Zhao
c5e7174785 lua-eco: update to 3.17.0
changelog: https://github.com/zhaojh329/lua-eco/releases/tag/v3.17.0

Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>
2026-04-03 22:22:04 +03:00
Michał Kępień
aa102d6ba8 lmdb: update to 0.9.35
Changelog: https://git.openldap.org/openldap/openldap/-/raw/LMDB_0.9.35/libraries/liblmdb/CHANGES

Signed-off-by: Michał Kępień <michal@isc.org>
2026-04-03 22:21:29 +03:00
Michał Kępień
47ce75da3d knot-resolver: drop LMDB build workaround
Drop the meson.build workaround needed before commit
8aa78ebebf, which fixed the
underlying issue.

Link: https://github.com/openwrt/packages/pull/29047
Signed-off-by: Michał Kępień <michal@isc.org>
2026-04-03 13:27:39 +03:00
Michał Kępień
8aa78ebebf lmdb: set SONAME for liblmdb.so
The LMDB shared library (liblmdb.so) does not currently have a SONAME
set, which can cause issues when linking against it.  Specifically, when
an object is linked against the library using its absolute path (for
example, in Meson builds), that path (as seen in the build environment)
is stored in the resulting object's DT_NEEDED entry.  This can prevent
the library from being found during runtime linking.  Set the SONAME to
liblmdb.so to ensure proper runtime linking.

Signed-off-by: Michał Kępień <michal@isc.org>
2026-04-03 09:38:58 +03:00
Alexandru Ardelean
7bcdfa4bd5 python-trove-classifiers: bump to 2026.1.14.14
Changelog: https://github.com/pypa/trove-classifiers/blob/main/CHANGELOG.rst
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-03 09:38:08 +03:00
Alexandru Ardelean
22a7482758 python-platformdirs: bump to 4.9.4
Changelog: https://github.com/platformdirs/platformdirs/blob/main/CHANGELOG.md
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-03 09:38:08 +03:00
Alexandru Ardelean
68d15d9821 python-pyparsing: bump to 3.3.2
pyparsing also requires the 'unittest' module from the Python3 package.

Changelog: https://github.com/pyparsing/pyparsing/blob/master/CHANGES
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-03 09:38:08 +03:00
Alexandru Ardelean
ee1d9f99ea python-typing-extensions: bump to 4.15.0
Changelog: https://github.com/python/typing_extensions/blob/main/CHANGELOG.md
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-03 09:38:08 +03:00
Alexandru Ardelean
646903fea2 python-urllib3: relax setuptools-scm version constraint
urllib3 2.6.3 pyproject.toml pins setuptools-scm<10 but
python-setuptools-scm was recently bumped to 10.0.3, breaking
the build. Drop the upper bound via patch to allow building
with setuptools-scm 10.x.

Also add test.sh to verify core API imports, Retry/Timeout
configuration, and PoolManager creation.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-02 19:23:54 +03:00
Alexandru Ardelean
184c4496eb python-pygments: bump to 2.20.0
Changes since 2.19.2:
- Added new Rell lexer; updated C++26 keywords, TOML 1.1.0,
  Python t-strings and PHP magic constants in existing lexers
- Fixed catastrophic backtracking in Archetype and Lua lexers
- Performance improvements via entry point caching
- Dropped Python 3.8, added Python 3.14 support

Link: https://github.com/pygments/pygments/blob/master/CHANGES
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-02 19:23:54 +03:00
Alexandru Ardelean
82d10f567f python-dotenv: bump to 1.2.2
Changes since 1.0.1:
- Added support for Python 3.14 (including free-threaded build)
- CLI now forwards flags directly to commands
- Improved symlink handling with explicit follow_symlinks option
- Added FIFO file support on Unix systems
- Changed file mode preservation to maintain original permissions

Also add test.sh to verify dotenv_values parsing and load_dotenv.

Note: PyPI renamed the source tarball from python-dotenv-*.tar.gz
to python_dotenv-*.tar.gz; add PYPI_SOURCE_NAME accordingly.

Link: https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-02 19:23:54 +03:00
Alexandru Ardelean
4c017bab49 python-slugify: bump to 8.0.4
Changes since 8.0.1:
- Improved uppercase special character handling and text
  normalization before unicode conversion
- Resolved pattern type issues
- Various bug fixes for robust character handling

Also add test.sh to verify slugification, unicode handling and
options like separator and max_length.

Link: https://github.com/un33k/python-slugify/blob/master/CHANGELOG.md
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-02 19:23:54 +03:00
Alexandru Ardelean
060377899b python-packaging: bump to 26.0
Changes since 25.0:
- Added support for PEP 751 (pylock files) and PEP 794 (import
  name metadata); new metadata writing functionality
- Performance improvements: 3x speedup via regex caching, lazy
  Version key calculation, accelerated canonicalize_name
- Refined PEP 440 prerelease handling and SpecifierSet matching
- Improved Marker and Requirement subclassing support

Link: https://github.com/pypa/packaging/blob/main/CHANGELOG.rst
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-02 19:23:54 +03:00
Alexandru Ardelean
2ad4889f50 python-requests: bump to 2.33.1
Changes since 2.32.5:
- Security fix for CVE-2026-25645 in extract_zipped_paths utility
- Migrated to PEP 517 build system
- Added inline type hints throughout the library
- Fixed Content-Type header parsing for malformed values

Also add test.sh to verify core API imports and PreparedRequest.

Link: https://github.com/psf/requests/blob/main/HISTORY.md
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-02 19:23:54 +03:00
Joshua Klinesmith
884b71edf3 fwupd: fix recursive dependency in Config.in
The fwupd Config.in menu depends on PACKAGE_fwupd-libs, making
FWUPD_PLUGIN_FLASHROM implicitly depend on PACKAGE_fwupd-libs.
But fwupd-libs has a conditional dependency on libflashrom gated
by FWUPD_PLUGIN_FLASHROM, creating a circular dependency.

Fix by removing the depends on PACKAGE_fwupd-libs guard from the
Config.in menu and moving DEPENDS from Package/fwupd/Default into
Package/fwupd-libs directly. The menu options are always visible
in menuconfig but only take effect when fwupd-libs is selected.

Co-developed-by: Florian Eckert <fe@dev.tdt.de>
Signed-off-by: Joshua Klinesmith <joshuaklinesmith@gmail.com>

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-02 08:34:03 +02:00
Joshua Klinesmith
39c9a7bff9 openvswitch: fix intree tunnel recursive dependency
Remove PROVIDES from all OVS kernel packages. The provider-
alternation logic in scripts/package-metadata.pl generates
recursive Kconfig dependencies when kmod-openvswitch-intree
provides kmod-openvswitch, because userspace packages
(openvswitch, ovsd, ovn-host) that +depend on kmod-openvswitch
get cross-referenced against the intree provider via
PACKAGE_<provider> < PACKAGE_<requester> conditions.

Verified locally: make defconfig produces zero OVS-related
recursive dependency errors with PROVIDES removed entirely.
The previous selective approach (keeping PROVIDES only for
openvswitch-intree) did not resolve the userspace recursion.

Users must install kmod-openvswitch-intree explicitly instead
of relying on provider alternation.

Fixes: openwrt/openwrt#22664
Signed-off-by: Joshua Klinesmith <joshuaklinesmith@gmail.com>

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-02 08:34:03 +02:00
Alexandru Ardelean
df1aacbfc7 python-pyrsistent: bump to 0.20.0
Changelog: https://github.com/tobgu/pyrsistent/blob/master/CHANGES.txt
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-01 22:37:48 +03:00
Alexandru Ardelean
0219210841 python-docutils: bump to 0.22.4
Changelog: https://docutils.sourceforge.io/RELEASE-NOTES.html
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-01 22:37:48 +03:00
Alexandru Ardelean
b8baf2c207 python-aiosignal: bump to 1.4.0
Changelog: https://github.com/aio-libs/aiosignal/blob/master/CHANGES.rst
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-01 22:37:48 +03:00
Alexandru Ardelean
349bf45ee1 python-rsa: bump to 4.9.1
Changelog: https://github.com/sybrenstuvel/python-rsa/blob/main/CHANGELOG.md
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-01 22:37:48 +03:00
Alexandru Ardelean
1b53e6c07f python-execnet: bump to 2.1.2
Changelog: https://github.com/pytest-dev/execnet/blob/main/CHANGELOG
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-01 22:37:48 +03:00
Alexandru Ardelean
bbce14f484 python-markdown: bump to 3.10.2
Changelog: https://github.com/Python-Markdown/markdown/blob/master/docs/change_log/release-3.10.md
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-01 22:37:48 +03:00
Alexandru Ardelean
961b94904a python-websocket-client: bump to 1.9.0
Changes since 1.7.0:
- v1.8.0: Add support for custom socket options and improved
  proxy handling
- v1.9.0: Fix compatibility with Python 3.12+ deprecations
- Various bug fixes for connection handling and error reporting

Also add test.sh to verify version and core API imports.

Link: https://github.com/websocket-client/websocket-client/blob/master/ChangeLog
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-01 10:29:27 +03:00
Alexandru Ardelean
2eef8732a3 python-sqlparse: bump to 0.5.5
Changes since 0.4.4:
- v0.5.0: Improved handling of CTEs and window functions
- v0.5.0: Better token classification for SQL dialects
- v0.5.x: Various bug fixes for edge cases in formatting
  and statement splitting

Also add test.sh to verify formatting, splitting, and parsing.

Link: https://github.com/andialbrecht/sqlparse/blob/master/CHANGELOG
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-01 10:29:27 +03:00
Alexandru Ardelean
f2c07b9ba0 python-cachetools: bump to 7.0.5
Changes since 5.3.1:
- v6.0: Drop Python 3.7 support; add Python 3.12/3.13
- v6.0: TTLCache now uses monotonic time for expiry
- v7.0: Cache classes are now generic (PEP 585 type hints)
- v7.0: New MRUCache (most-recently-used) eviction policy
- Various performance improvements across all cache types

Also add test.sh to verify LRU/LFU/TTL caches and @cached decorator.

Link: https://github.com/tkem/cachetools/blob/master/CHANGELOG.rst
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-01 10:29:27 +03:00
Alexandru Ardelean
1d8ab824ce python-sniffio: bump to 1.3.1
Changes since 1.3.0:
- Fix compatibility with Python 3.12+ by updating deprecated
  asyncio internals usage

Also add test.sh to verify version and asyncio library detection.

Link: https://github.com/python-trio/sniffio/blob/master/CHANGELOG.rst
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-01 10:29:27 +03:00
Alexandru Ardelean
ba7acd594d python-jmespath: bump to 1.1.0
Changes since 1.0.1:
- Support for multi-select list/hash expressions with enhanced
  function argument validation
- Minor performance improvements in expression parsing

Also add test.sh to verify field access, wildcards, and filters.

Link: https://github.com/jmespath/jmespath.py/blob/develop/CHANGELOG.rst
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-01 10:29:27 +03:00
Alexandru Ardelean
ce2804c73f python-decorator: bump to 5.2.1
Changes since 4.4.2:
- v5.x rewrites the implementation using the standard library
  inspect module, dropping the code generation approach
- Signature preservation is now based on functools.wraps internals
- New contextmanager and asynccontextmanager decorator support
- Python 3.8+ required; Python 2 no longer supported

Also add test.sh to verify signature preservation and basic usage.

Link: https://github.com/micheles/decorator/blob/master/CHANGES.md
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-01 10:29:27 +03:00
Alexandru Ardelean
a7e96ec919 python3-email: add python3-urllib as dependency
In recent versions of Python, trying to include 'email' also pulls
in urllib from CPython.
So just add it as dependency.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-01 10:29:21 +03:00
Alexandru Ardelean
c33cef1f8b python-tabulate: bump to 0.10.0
Changes since 0.9.0:
- New 'outline' table format
- Support for multi-line cell values in more formats
- Improved alignment for mixed-type columns
- Various bug fixes for edge cases in number formatting

Also add test.sh to verify version and basic table rendering.

Link: https://github.com/astanin/python-tabulate/blob/master/CHANGELOG
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-01 10:29:21 +03:00
Alexandru Ardelean
b07af9a38a python-schema: bump to 0.7.8
Changes since 0.7.5:
- Fix handling of Optional keys with default values
- Improve error messages for nested schema failures
- Various bug fixes and compatibility improvements

Also add test.sh to verify version and data validation API.

Link: https://github.com/keleshev/schema/blob/master/CHANGELOG.rst
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-01 10:29:21 +03:00
Alexandru Ardelean
16b0426b8e python-schedule: bump to 1.2.2
Changes since 1.2.0:
- Fix compatibility with Python 3.12 deprecation of datetime.utcnow()
- Various minor bug fixes and improvements

Also add test.sh to verify version and core scheduling API.

Link: https://github.com/dbader/schedule/blob/master/CHANGELOG.rst
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-01 10:29:21 +03:00
Alexandru Ardelean
ca3501a181 python-iniconfig: bump to 2.3.0
Changes since 2.0.0:
- Improve error messages for invalid ini files
- Drop support for Python 3.7, add Python 3.12/3.13

Also add test.sh to verify version and basic INI parsing.

Link: https://github.com/pytest-dev/iniconfig/blob/main/CHANGELOG
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-01 10:29:21 +03:00
Joshua Klinesmith
9e3c668211 stunnel: create PID directory before alt_config_file return
When alt_config_file is set, global_defs() returns before creating
the PID file directory. stunnel then fails to start because it
cannot write its PID file to the nonexistent directory.

Move the PID directory creation and ownership setup above the
alt_config_file early return so it runs regardless of config mode.

Fixes: openwrt/openwrt#28982
Signed-off-by: Joshua Klinesmith <joshuaklinesmith@gmail.com>

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-01 08:47:47 +02:00
Niklas Thorild
0f729f36b2 telegraf: update to 1.38.2
- Update Telegraf to v1.38.2

Signed-off-by: Niklas Thorild <niklas@thorild.se>
2026-03-31 22:38:28 +03:00
Noah Meyerhans
d6d7d2325a bind: bump to 9.20.21
Fixes several security issues:

- CVE-2026-1519 Fix unbounded NSEC3 iterations when validating
  referrals to unsigned delegations.
- CVE-2026-3104 Fix memory leaks in code preparing DNSSEC proofs of
  non-existence.
- CVE-2026-3119 Prevent a crash in code processing queries containing
  a TKEY record.
- CVE-2026-3591 Fix a stack use-after-return flaw in SIG(0) handling
  code.

Signed-off-by: Noah Meyerhans <frodo@morgul.net>
2026-03-31 04:42:09 -07:00
Eric Fahlgren
6021274e04 owut: update to 2026.03.30
Bug fixes:
    efahl/owut@c243c697c7 owut: report only enabled branches and their data
    efahl/owut@f381ad78ec owut: handle true redirects
Enhancements:
    efahl/owut@670907a508 owut: modernize what provides lookups
    efahl/owut@98471fa156 owut: fix color of status message

Signed-off-by: Eric Fahlgren <ericfahlgren@gmail.com>
2026-03-31 10:39:09 +03:00
Alexandru Ardelean
f5e7a07572 python-flask-socketio: bump to 5.6.1
Requires python-socketio >= 5.12.0 and python-engineio >= 4.11.0,
both bumped in preceding commits.

Also fix test.sh to use importlib.metadata for version check
since flask_socketio no longer exposes __version__ directly.

Link: https://github.com/miguelgrinberg/Flask-SocketIO/blob/main/CHANGES.md
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-03-31 09:32:36 +03:00
Alexandru Ardelean
e2b96c3802 python-socketio: bump to 5.16.1
Changes since 5.11.2:
- v5.12.0: Add Server.reason attribute for disconnect reason tracking
- v5.13+: Improved namespace and room management
- v5.16+: Fix compatibility with python-engineio 4.11+

Link: https://github.com/miguelgrinberg/python-socketio/blob/main/CHANGES.md
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-03-31 09:32:36 +03:00
Alexandru Ardelean
62f7b05b68 python-engineio: bump to 4.13.1
Changes since 4.5.1:
- v4.6+: Add support for WebTransport protocol
- v4.9+: Improved async task handling and cancellation
- v4.11.0: Required minimum for python-socketio 5.12+
- Various fixes for connection lifecycle and error handling

Also add test.sh to verify WSGI/ASGI app wrappers and server creation.

Link: https://github.com/miguelgrinberg/python-engineio/blob/main/CHANGES.md
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-03-31 09:32:36 +03:00
Alexandru Ardelean
d0100cef45 python-simple-websocket: new package (1.1.0)
Simple WebSocket and WAMP client and server for Python.
Required by python-engineio 4.13.1 threading async_mode for
WebSocket transport support.

Link: https://github.com/miguelgrinberg/simple-websocket
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-03-31 09:32:36 +03:00
Alexandru Ardelean
593abaa49b python-wsproto: new package (1.3.2)
Pure-Python WebSocket protocol implementation, implements RFC6455
and RFC7692 (WebSocket Compression Extensions).
Required as a dependency of python-simple-websocket.

Link: https://github.com/python-hyper/wsproto
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-03-31 09:32:36 +03:00
Alexandru Ardelean
0dbba05a73 python-h11: new package (0.16.0)
Pure-Python, bring-your-own-I/O implementation of HTTP/1.1.
Required as a dependency of python-wsproto.

Link: https://github.com/python-hyper/h11
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-03-31 09:32:36 +03:00
Alexandru Ardelean
673344bd7c Flask: bump to 3.1.3; add test.sh
Changelog since 3.1.2:
- Fix security vulnerability GHSA-68rp-wp8r-4726: session now marked as
  accessed for key-existence checks (in, len) to prevent timing attacks

Add python3-blinker as dependency (should have been there also in 3.1.2)

Add test.sh.

Full changelog: https://flask.palletsprojects.com/en/stable/changes/

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-03-31 09:32:36 +03:00
Alexandru Ardelean
098f975ca3 python-blinker: new package (1.9.0)
Flask 3.x requires blinker for its signal system. Add python-blinker
1.9.0 as a new package.

blinker is a pure-Python package (flit-core build backend) with no
runtime dependencies.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-03-31 09:32:36 +03:00
Alexandru Ardelean
2dbd1a9bb5 python-wcwidth: drop package
There is no clear user for this package.
It's a pure-python package which could be installed via pip on a target.
Unless there is someone who comes forward and asks that we keep it,
I see no reason to keep it.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-03-30 19:23:40 +03:00