Commit Graph

4640 Commits

Author SHA1 Message Date
Milinda Brantini 52fc48971d golang: Update to 1.22.7
go1.22.7(released 2024-09-05)includes security fixes to the encoding/gob,
go/build/constraint, and go/parser packages,
as well as bug fixes to the fix command and the runtime.

Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>
2024-09-08 23:53:28 +08:00
Aleksey Vasilenko 541060ee56 rust: update to 1.81.0
- Automatically refresh one patch
- Other patch is unchanged

Signed-off-by: Aleksey Vasilenko <aleksey.vasilenko@gmail.com>
2024-09-08 23:52:46 +08:00
Michael Heimpold 1890b5fcc3 php8: update to 8.3.11
Upstream changelog:
https://www.php.net/ChangeLog-8.php#8.3.11

A minor adaption to a single patch is required.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2024-09-05 07:18:53 +02:00
Hirokazu MORIKAWA 0d50f273b2 node: bump to v20.17.0
Notable Changes
	module: support require()ing synchronous ESM graphs
	path: add matchesGlob method
	stream: expose DuplexPair API

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2024-08-27 16:04:53 +08:00
Alexandru Ardelean ddc619dc61 numpy: bump to version 2.1.0
Re-applied:
   003-without-vendored-meson.patch

Added:
   004-workaround-for-multiple-top-level-packages-discovered.patch

Suggestion found here:
   https://stackoverflow.com/questions/72294299/multiple-top-level-packages-discovered-in-a-flat-layout

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2024-08-26 15:43:02 +03:00
Alexandru Ardelean 031a4968b5 django: bump to 5.1
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2024-08-26 15:43:02 +03:00
Matt Merhar dc14c6a63b perl-try-tiny: update to 0.32
This doesn't include functional changes, but fixes tests with Perl >=
5.41.3.

Signed-off-by: Matt Merhar <mattmerhar@protonmail.com>
2024-08-24 11:23:16 -07:00
Aleksey Vasilenko b101cc6d23 tcl: update to 8.6.14
Signed-off-by: Aleksey Vasilenko <aleksey.vasilenko@gmail.com>
2024-08-16 16:02:10 -07:00
Jianhui Zhao 7c09bbe1bd lua-eco: update to 3.6.0
A new package lua-eco-packet added since 3.6.0.

Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>
2024-08-13 16:19:57 +08:00
Luca Barbato d4416c2e63 rust: update to 1.80.1
Signed-off-by: Luca Barbato <lu_zero@gentoo.org>
2024-08-13 16:19:37 +08:00
Milinda Brantini 7b4fbfda5d golang: Update to 1.22.6
go1.22.6 (released 2024-08-06) includes fixes to the go command,
the compiler, the linker, the trace command, the covdata command,
and the bytes, go/types, and os/exec packages.

Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>
2024-08-10 16:59:36 +08:00
Hirokazu MORIKAWA 4b426972f8 node: bump to v20.16.0
Notable Changes
	process: add process.getBuiltinModule(id)
	doc: doc-only deprecate OpenSSL engine-based APIs
	inspector: fix disable async hooks on Debugger.setAsyncCallStackDepth

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2024-08-08 21:40:32 +08:00
Michael Heimpold e06c27d264 php8: update to 8.3.10
Upstream changelog:
https://www.php.net/ChangeLog-8.php#8.3.10

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2024-08-07 07:01:44 +02:00
Jianhui Zhao fe81e67fb5 lua-eco: update to 3.5.3
Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>
2024-08-02 22:23:54 +08:00
Andreas Gnau 68c0a57f57 perl: Run make depend to fix build race condition
Run make depend before building perl. This fixes parallel build failures
on machines with a high number of cores.

Example error 1:

    /bin/ln -s /build/staging_dir/hostpkg/usr/bin/generate_uudmap generate_uidmap
    make[5]: ./generate_uudmap: Command not found
    make[5]: *** [Makefile:321: bitcount.h] Error 127

Example error 2:

    /bin/ln -s /build/staging_dir/hostpkg/usr/bin/generate_uudmap generate_udmap
    ./generate_uudmap uudmap.h bitcount.h mg_data.h
    /bin/ln: failed to create symbolic link 'generate_uudmap': File exists
    make[5]: *** [Makefile:325: generate_uudmap] Error 1

Link: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=996953
Link: 366bc98c91
Closes: https://github.com/openwrt/packages/issues/8238
Signed-off-by: Andreas Gnau <andreas.gnau@iopsys.eu>
2024-07-28 15:53:19 -06:00
Luiz Angelo Daros de Luca eb05355e5c ruby: update to 3.3.4
Ruby 3.3.4 fixes a regression in Ruby 3.3.3 that dependencies are
missing in the gemspec of some bundled gems: net-pop, net-ftp, net-imap,
and prime. The fix allows Bundler to successfully install those gems on
platforms like Heroku. If your bundle install runs correctly now, you
may not have this issue. Other changes are mostly minor bug fixes.

See: https://www.ruby-lang.org/en/news/2024/07/09/ruby-3-3-4-released/

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2024-07-27 14:47:02 +01:00
Aleksey Vasilenko 8d68f0b0db rust: update to 1.80.0
- Remove two upstreamed patches
- Manually refresh one patch
- Automatically refresh another patch

Signed-off-by: Aleksey Vasilenko <aleksey.vasilenko@gmail.com>
2024-07-26 12:38:25 +08:00
Esaaprilia Salsabila 5a923168c8 perl: fix Segmentation fault
Signed-off-by: Esaaprilia Salsabila <esaapriliasalsabila@gmail.com>
2024-07-22 18:48:26 -07:00
Alexandru Ardelean 32b033868d django-restframework: bump to version 3.15.2
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2024-07-18 16:20:33 +03:00
Alexandru Ardelean f9dbdeaa03 django: bump to version 5.0.7
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2024-07-18 16:20:33 +03:00
Philip Prindeville ea5fd93ca8 perl-text-csv_xs: Update to 1.55
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2024-07-14 19:08:29 -07:00
Philip Prindeville 52c42db8e2 perl-cgi: Update to 4.66
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2024-07-14 16:06:36 -07:00
Michael Heimpold 07714a24c8
Merge pull request #24548 from mhei/php8-update-to-8.3.9
php8: update to 8.3.9
2024-07-13 12:15:56 +02:00
Rosen Penev d257ffe609 python3: use pkgconfig to find readline
When searching for readline, ncurses is needed, which can be ncursesw or
ncurses. Use pkgconfig to avoid the whole situation and simplify.

Also add readline/host as the OS one may be unusable.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2024-07-12 13:10:49 -07:00
Rosen Penev 434cdf4a75 python3: remove rpath from host python
Everything relevant to python is now built statically. No need for
rpath.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2024-07-12 13:10:49 -07:00
Rosen Penev 8aac7a78a9 python3: replace e2fsprogs includes
libuuid is provided by util-linux now.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2024-07-12 13:10:49 -07:00
Aleksey Vasilenko fa80e4383b erlang: update to 27.0.1
Disable host build of wx - it slows down the build and is not used anyway

Signed-off-by: Aleksey Vasilenko <aleksey.vasilenko@gmail.com>
2024-07-12 12:56:24 -07:00
Javier Marcet 2c96a5bb1d luajit2: update to v2.1-20240626
- change: disable hash computation optimization because of the
 possibility of severe degradation.

Signed-off-by: Javier Marcet <javier@marcet.info>
2024-07-10 10:24:39 +02:00
Florian Eckert b814db5618
Merge pull request #24533 from bretello/fix-lua-cjson-pkg-src-url
lua-cjson: fix broken PKG_SOURCE_URL
2024-07-10 08:13:41 +02:00
Hirokazu MORIKAWA ebc219db41 node: July 8, 2024 Security Releases
This is a security release.

Notable Changes

    CVE-2024-36138 - Bypass incomplete fix of CVE-2024-27980 (High)
    CVE-2024-22020 - Bypass network import restriction via data URL (Medium)
    CVE-2024-22018 - fs.lstat bypasses permission model (Low)
    CVE-2024-36137 - fs.fchown/fchmod bypasses permission model (Low)
    CVE-2024-37372 - Permission model improperly processes UNC paths (Low)

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2024-07-10 10:36:48 +08:00
Geoffrey Hausheer 6769d5cf11 luasocket: Enable serial module
Includes the serial module for luasockets (which is already being built)
in the final package. This allows using socket.select() on a serial port
(eg /dev/ttyACM0) which is the easiest way to use a serial-port with
coroutines.

Signed-off-by: Geoffrey Hausheer <rc2012@pblue.org>
2024-07-09 17:52:36 -07:00
Michael Heimpold 183810bd5b php8: update to 8.3.9
Upstream changelog:
https://www.php.net/ChangeLog-8.php#8.3.9

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2024-07-09 20:49:44 +02:00
brethil bretello 64ac0914f8
lua-cjson: fix broken PKG_SOURCE_URL
See 718f27293a

Signed-off-by: brethil bretello <bretello@distruzione.org>
2024-07-09 18:20:06 +02:00
Milinda Brantini 18aaf0cc44 golang: Update to 1.22.5
go1.22.5 (2024-07-02) includes security fixes to the net/http package, 
as well as bug fixes to the compiler, cgo, the go command, the linker, 
the runtime, and the crypto/tls, go/types, net, net/http, and os/exec.

Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>
2024-07-08 16:49:12 -07:00
Lu jicong 84464a656c rust: select correct architecture for armv5
Currently, armv5 and armv6 targets are both using armv6 rustc.
Without this patch, rust programs in armv5 targets throw illegal instruction
error.

Signed-off-by: Lu jicong <jiconglu58@gmail.com>
2024-07-04 02:09:45 +08:00
Jianhui Zhao 482cfd1c6a lua-ffi: Add package
Lua-ffi is a portable lightweight C FFI for Lua, based on libffi
and aiming to be mostly compatible with LuaJIT FFI, but written
from scratch in C language.

Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>
2024-06-23 11:15:50 -07:00
Hirokazu MORIKAWA a5e319df3d node: bump to v20.15.0
Notable Changes
* test_runner: support test plans
* inspector: introduce the --inspect-wait flag
* zlib: expose zlib.crc32()
* cli: allow running wasm in limited vmem with --disable-wasm-trap-handler

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2024-06-23 11:06:32 -07:00
Esaaprilia Salsabila c5b97d4d96 perl: update version 5.40.0
https://metacpan.org/release/HAARG/perl-5.40.0

remove bytes_heavy.pl
Perl/perl5#22047

perl update version 5.40.0

Signed-off-by: Esaaprilia Salsabila <esaapriliasalsabila@gmail.com>
2024-06-20 14:18:35 -07:00
Luiz Angelo Daros de Luca 0c7b588695 ruby: update to 3.3.3
Ruby 3.3 adds a new parser named Prism, uses Lrama as a parser
generator, adds a new pure-Ruby JIT compiler named RJIT, and many
performance improvements especially YJIT.

See: https://www.ruby-lang.org/en/news/2023/12/25/ruby-3-3-0-released/

The 3.3.1 release includes security fixes.

- CVE-2024-27282: Arbitrary memory address read vulnerability with Regex search
- CVE-2024-27281: RCE vulnerability with .rdoc_options in RDoc
- CVE-2024-27280: Buffer overread vulnerability in StringIO

See: https://www.ruby-lang.org/en/news/2024/04/23/ruby-3-3-1-released/

The 3.3.2 release includes many bug-fixes.

See: https://www.ruby-lang.org/en/news/2024/05/30/ruby-3-3-2-released/

Packaging changes since 3.2.2:
- New packages: ruby-prism and ruby-rjit
- Added /usr/bin/rdbg to ruby-debug
- Added /usr/bin/syntax_suggest to ruby-syntax_suggest

The 3.3.3 release includes:

- RubyGems 3.5.11
- Bundler 2.5.11
- REXML 3.2.8
- strscan 3.0.9
- --dump=prism_parsetree is replaced by --parser=prism --dump=parsetree
- Invalid encoding symbols raise SyntaxError instead of EncodingError
- Memory leak fix in Ripper parsing
- Bugfixes for YJIT, **{}, Ripper.tokenize,
- RubyVM::InstructionSequence#to_binary, --with-gmp, and some build
  environments

See: https://www.ruby-lang.org/en/news/2024/06/12/ruby-3-3-3-released/

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2024-06-17 16:22:59 +08:00
Jianhui Zhao 1425899f7e lua-eco: update to 3.5.2
Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>
2024-06-16 02:35:26 +08:00
Michael Heimpold f5e5fe7ad2
Merge pull request #24367 from mhei/php8-update-to-8.3.8-with-libgd-fixup
php8: workaround libgd capability detection (refs #23846)
2024-06-12 07:35:51 +02:00
Rosen Penev 9acf60320c lzmq: fix compilation with GCC14
Missing header.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2024-06-10 13:47:21 -07:00
Michael Heimpold ab7d5716d0
Merge pull request #24339 from mhei/php8-update-to-8.3.8
php8: update to 8.3.8
2024-06-10 06:51:59 +02:00
Milinda Brantini b4ffdb4c42 golang: Update to 1.22.4
go1.22.4 (released 2024-06-04) includes
security fixes to the archive/zip and net/netip packages,
as well as bug fixes to the compiler,
the go command, the linker,
the runtime, and the os package.

Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>
2024-06-10 04:45:29 +08:00
Alexandru Ardelean 41486a7df7
Merge pull request #24314 from commodo/python-updates1
django,python-{requests,evdev,lxml}: bump versions
2024-06-09 12:50:19 +03:00
Aleksey Vasilenko fa7b780cbf erlang: fix mis-detection of transparent hugepages
Latest Erlang update incorrectly detects THP as always enabled,
which leads to segmentation fault on systems without transparent hugepages.
Here we manually override configure flag by checking actual option of target kernel.

Signed-off-by: Aleksey Vasilenko <aleksey.vasilenko@gmail.com>
2024-06-08 19:45:19 -07:00
Rosen Penev ea8e6fbf33 perl: fix compilation with GCC14
Need the header for fegetround.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2024-06-08 17:47:24 -07:00
Michael Heimpold 1b7f11d96d php8: workaround libgd capability detection (refs #23846)
This is an alternative approach to #24209. Instead of switching
to bundled/internal libgd, workaround the capability detection
by giving the information to the build system directly.

PHP's original approach does not work when cross-compiling,
but since it is known which features are enabled in OpenWrt's
build, we can directly enable these features here, too.

This is not that future prove, but should do the job for the
moment until a proper solution was discussed with upstream.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2024-06-08 07:33:18 +02:00
Michael Heimpold 1dd9f4bfc8 php8: update to 8.3.8
This fixes:
    - CVE-2024-4577
    - CVE-2024-5458
    - CVE-2024-5585

Changelog: https://www.php.net/ChangeLog-8.php#8.3.8

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2024-06-08 06:17:24 +02:00
W. Michael Petullo b560ea218e python-networkx: update to 3.3
Signed-off-by: W. Michael Petullo <mike@flyn.org>
2024-06-07 03:23:18 +08:00