Commit Graph
3735 Commits
Author SHA1 Message Date
Alexandru Ardelean b9a47cc470 django: bump to version 4.0.5
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-06-19 09:03:03 +02:00
Alexandru Ardelean 7fddb0b6fb lxml: bump to version 4.9.0
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-06-19 09:03:03 +02:00
Jeffery To 57e2b656cb python3: Update to 3.10.5, refresh patches
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-06-13 18:21:20 +08:00
Hirokazu MORIKAWA d8dc54ceea node: bump to v16.15.1
Upgrade npm to 8.11.0
Suppressed unnecessary builds.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2022-06-09 21:07:59 -07:00
Javier Marcet f7a00eb6ab python-jsonschema: Update to 4.6.0
What's Changed:

 - Add package_url for changelog by @fhightower
 - Only validate unevaluated properties/items on applicable types by
 @EpicWink
 - Mark library as typed (PEP-561) by @ssbarnea
 - Add v4.5.1 to changelog by @sirosen
 - Modernize the packaging setup via PEP 621 and Hatch. by @Julian

New Contributors:

 - @fhightower made their first contribution
 - @EpicWink made their first contribution

Signed-off-by: Javier Marcet <javier@marcet.info>
2022-06-09 11:01:25 -07:00
Jeffery To faa546ac0a micropython-lib: Update to latest master
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-06-06 15:09:51 -07:00
Jeffery To 112cf09031 golang: Update to 1.18.3
Includes fix for CVE-2022-30634 (crypto/rand: Read hangs when passed
buffer larger than 1<<32 - 1).

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-06-06 15:08:39 -07:00
Alexandru Ardelean 5e1546c4c9 openpyxl: bump to version 3.0.10
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-06-03 21:30:45 -07:00
Alexandru Ardelean e65d982541 pillow: bump to version 9.1.1
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-06-03 21:30:45 -07:00
Hirokazu MORIKAWA fcfd2599d9 node: bump to v16.15.0
Description:
Update from  v16.15.0
Changed handling of host's npm problems due to npm updates.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2022-05-31 23:14:52 -07:00
Jeffery To d71f082cdc Merge pull request #18584 from mpratt14/golang-bootstrap-arch
golang: some makefile fixes
2022-05-31 14:59:04 +08:00
Michael Heimpold fbcb35b33f php8: update to 8.1.6
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2022-05-29 11:05:11 +02:00
Michael Pratt bb7c596028 golang: do not rely on Go script host detection
for some use cases, for example:
a system with 64 bit kernel
and 32 bit userspace programs

the local Go installation is "detected"
using the kernel "uname",
causing build failure if they happen to differ

by adding the argument GOHOSTARCH using the corresponding make variable
it would be fully controlled in the openwrt git tree
based on the HOST_ARCH make variable.

Signed-off-by: Michael Pratt <mcpratt@pm.me>
2022-05-27 02:39:52 -04:00
Michael Pratt b99164aff4 golang: enable verbose output
allow the building script of Go to output verbose
when make is executed with "V=s..."

Signed-off-by: Michael Pratt <mcpratt@pm.me>
2022-05-27 02:39:52 -04:00
Michael Pratt abf28899a0 golang: split compile recipe into configure and compile
the default Configure recipe for packages
assumes that there is a "configure" script
in the source tree directory

Go does not have such a script,
configure and compile is done with the same script

so split the current Compile recipe
into both Configure and Compile recipes

Signed-off-by: Michael Pratt <mcpratt@pm.me>
2022-05-27 02:39:52 -04:00
Maciej Krüger 0b5eb86718 lua-openssl: update to version 0.8.2-1
Signed-off-by: Maciej Krüger <mkg20001@gmail.com>
2022-05-26 20:39:30 -07:00
Javier Marcet f1ed3f5bc2 python-jsonschema: Update to 4.5.1
What's Changed:

 - Extend dynamicRef keyword by @nezhar
 - Add FORMAT_CHECKER attribute for Validator by @TiborVoelcker
 - Remove stray double-quote by @lurch
 - Ensure proper sorting of list in error message by @ssbarnea

Signed-off-by: Javier Marcet <javier@marcet.info>
2022-05-25 17:04:47 -07:00
Javier Marcet 117e3d6a18 python3-paramiko: update to version 2.11.0
2.11.0:

 - [Feature] Add SSH config token expansion (eg %h, %p) when parsing
 ProxyJump directives. Patch courtesy of Bruno Inec.

 - [Support] (via #2011) Apply unittest skipIf to tests currently
 using SHA1 in their critical path, to avoid failures on systems
 starting to disable SHA1 outright in their crypto backends (eg RHEL
 9). Report & patch via Paul Howarth.

 - [Support] Update camelCase method calls against the threading
 module to be snake_case; this and related tweaks should fix some
 deprecation warnings under Python 3.10. Thanks to Karthikeyan
 Singaravelan for the report, @Narendra-Neerukonda for the patch,
 and to Thomas Grainger and Jun Omae for patch workshopping.

 - [Support] Recent versions of Cryptography have deprecated Blowfish
 algorithm support; in lieu of an easy method for users to remove it
 from the list of algorithms Paramiko tries to import and use, we’ve
 decided to remove it from our “preferred algorithms” list. This will
 both discourage use of a weak algorithm, and avoid warnings. Credit
 for report/patch goes to Mike Roest.

2.10.5:

 - [Bug] Windows-native SSH agent support as merged in 2.10 could
 encounter Errno 22 OSError exceptions in some scenarios (eg server
 not cleanly closing a relevant named pipe). This has been worked
 around and should be less problematic. Reported by Danilo Campana
 Fuchs and patched by Jun Omae.

 - [Bug] OpenSSH 7.7 and older has a bug preventing it from
 understanding how to perform SHA2 signature verification for RSA
 certificates (specifically certs - not keys), so when we added SHA2
 support it broke all clients using RSA certificates with these
 servers. This has been fixed in a manner similar to what OpenSSH’s
 own client does: a version check is performed and the algorithm used
 is downgraded if needed. Reported by Adarsh Chauhan, with fix
 suggested by Jun Omae.

 - [Bug] Align signature verification algorithm with OpenSSH re:
 zero-padding signatures which don’t match their nominal size/length.
 This shouldn’t affect most users, but will help Paramiko-implemented
 SSH servers handle poorly behaved clients such as PuTTY. Thanks to
 Jun Omae for catch & patch.

Signed-off-by: Javier Marcet <javier@marcet.info>
2022-05-25 17:03:28 -07:00
Jianhui Zhao 3d2c8121e2 lua-eco: Add package
Lua-eco is a `Lua coroutine` library which was implemented based on `IO event`.

Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>
2022-05-15 05:49:13 -07:00
Jeffery To 659f87d5d4 golang: Update to 1.18.2
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-05-14 21:28:14 -07:00
Jeffery To 8550edbe85 micropython-lib: Update to latest master
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-05-14 21:27:21 -07:00
W. Michael Petullo 0320174ff2 python3-networkx: update to 2.8
Signed-off-by: W. Michael Petullo <mike@flyn.org>
2022-05-11 17:50:42 -04:00
W. Michael Petullo b1d67bd944 luasocket: update to 3.0.0
Signed-off-by: W. Michael Petullo <mike@flyn.org>
2022-05-11 17:49:59 -04:00
W. Michael Petullo 3bac465051 luaexpat: update to 1.4.1
Signed-off-by: W. Michael Petullo <mike@flyn.org>
2022-05-11 17:47:58 -04:00
Javier Marcet b1159e8764 python3-paramiko: update to version 2.10.4
- [Bug] Servers offering certificate variants of hostkey algorithms
 (eg ssh-rsa-cert-v01@openssh.com) could not have their host keys
 verified by Paramiko clients, as it only ever considered non-cert key
 types for that part of connection handshaking. This has been fixed.

 - [Bug] PKey instances’ __eq__ did not have the usual safety guard in
 place to ensure they were being compared to another PKey object,
 causing occasional spurious BadHostKeyException (among other things).
 This has been fixed. Thanks to Shengdun Hua for the original report
 /patch and to Christopher Papke for the final version of the fix.

 - [Support] Update camelCase method calls against the threading
 module to be snake_case; this and related tweaks should fix some
 deprecation warnings under Python 3.10. Thanks to Karthikeyan
 Singaravelan for the report, @Narendra-Neerukonda for the patch, and
 to Thomas Grainger and Jun Omae for patch workshopping.

Signed-off-by: Javier Marcet <javier@marcet.info>
2022-05-02 12:48:21 -07:00
Josef Schlehofer e670506a16 Merge pull request #18403 from turris-cz/change-Flask-Jinja2-maintainer
Flask, Jinja2: change maintainer
2022-04-28 13:03:01 +02:00
Alexandru Ardelean 66bf8fb484 django: bump to version 4.0.4
Fixes
https://nvd.nist.gov/vuln/detail/CVE-2022-28347
https://nvd.nist.gov/vuln/detail/CVE-2022-28346

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-04-28 08:32:24 +02:00
Šimon Bořek b4fa391fe6 Jinja2: change maintainer to Šimon Bořek
As we are using this package in Turris OS
and Daniel Golle decided to no longer maintain this
and some other Python packages I'd like to take
this package maintainership as was originally
suggested in https://github.com/openwrt/packages/pull/17911
by Josef Schlehofer (@BKPepe).

Signed-off-by: Šimon Bořek <simon.borek@nic.cz>
2022-04-27 18:56:48 +02:00
Šimon Bořek 55bfe37ee8 Flask: change maintainer to Šimon Bořek
As we are using this package in Turris OS
and Daniel Golle decided to no longer maintain this
and some other Python packages I'd like to take
this package maintainership as was originally
suggested in https://github.com/openwrt/packages/pull/17911
by Josef Schlehofer (@BKPepe).

Signed-off-by: Šimon Bořek <simon.borek@nic.cz>
2022-04-27 18:42:21 +02:00
Michael Heimpold ef1249f354 php8: update to 8.1.5
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2022-04-26 21:14:22 +02:00
Luiz Angelo Daros de Luca 16ae59c1b3 ruby: update to 3.1.2
Ruby 3.1.0 major changes:
- YJIT: New experimental in-process JIT compiler
- debug gem: A new debugger
- error_highlight: Fine-grained error location in backtrace
- IRB Autocomplete and Documentation Display
- Many more. See:
  https://www.ruby-lang.org/en/news/2021/12/25/ruby-3-1-0-released/

Ruby 3.1.1 changes:
- Many non-security bug fixes. See:
  https://www.ruby-lang.org/en/news/2022/02/18/ruby-3-1-1-released/

Ruby 3.1.2 changes:
- CVE-2022-28738: Double free in Regexp compilation
- CVE-2022-28739: Buffer overrun in String-to-Float conversion

Packaging changes:
- Dropped 100-musl.patch (upstream fix)
- Added: ruby-error_highlight, ruby-random_formatter,
  ruby-ruby2_keywords
- Removed: ruby-dbm, ruby-gdbm, ruby-fiber, ruby-gdbm, ruby-tracer
- ruby_find_pkgsdeps script:
  * cleaned some ignored and weak dependencies
- ruby_missingfiles script:
  * fix the example cmdline
  * let diff use all terminal columns

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2022-04-25 12:13:08 -07:00
Alexandru Ardelean 2c2a8990bb pillow: bump to version 9.1.0
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-04-19 07:38:45 +02:00
Jeffery To 43a380f953 python-twisted: Update to 22.4.0, refresh patches
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-04-18 19:12:27 +08:00
Hirokazu MORIKAWA 7636ffe654 node-serialport-bindings: Support for npm@8
With the upgrade of node.js to version 16, the npm version will also change to version 8.
This fix is to support npm@8. npm@6 can also build without problems.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2022-04-16 11:03:08 -07:00
Hirokazu MORIKAWA 46ad7621a4 node-arduino-firmata: Support for npm@8
With the upgrade of node.js to version 16, the npm version will also change to version 8.
This fix is to support npm@8. npm@6 can also build without problems.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2022-04-16 11:02:44 -07:00
Hirokazu MORIKAWA de06db77ed node-cylon: Support for npm@8
With the upgrade of node.js to version 16, the npm version will also change to version 8.
This fix is to support npm@8. npm@6 can also build without problems.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2022-04-16 11:02:14 -07:00
Hirokazu MORIKAWA 9dc5f7e328 node-serialport: Support for npm@8
With the upgrade of node.js to version 16, the npm version will also change to version 8.
This fix is to support npm@8. npm@6 can also build without problems.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2022-04-16 11:01:53 -07:00
Hirokazu MORIKAWA d2109d23f8 node-javascript-obfuscator: Support for npm@8
With the upgrade of node.js to version 16, the npm version will also change to version 8.
This fix is to support npm@8. npm@6 can also build without problems.

The modification method is different from other node modules.
The reason is due to the npm@8 issue.
https://github.com/npm/cli/issues/4027

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2022-04-16 11:01:38 -07:00
Hirokazu MORIKAWA 3e3b44b868 node-hid: Support for npm@8
With the upgrade of node.js to version 16, the npm version will also change to version 8.
This fix is to support npm@8. npm@6 can also build without problems.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2022-04-16 11:01:24 -07:00
Hirokazu MORIKAWA 5c5fa73db1 node-yarn: Support for npm@8
With the upgrade of node.js to version 16, the npm version will also change to version 8.
This fix is to support npm@8. npm@6 can also build without problems.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2022-04-16 11:01:06 -07:00
Hirokazu MORIKAWA ef87dfec72 node-homebridge: Support for npm@8
With the upgrade of node.js to version 16, the npm version will also change to version 8.
This fix is to support npm@8. npm@6 can also build without problems.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2022-04-16 11:00:54 -07:00
Hirokazu MORIKAWA 5beac54277 node: Major update from v14 to v16
This update also changes npm from v6 to v8.
This change also requires node module packages to be modified.
Each package will be updated later.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2022-04-16 11:00:20 -07:00
Jeffery To 86fd1ebbe4 golang: Fix conditionals not stripped
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-04-15 15:18:12 -07:00
Jeffery To 8c0477a895 golang: Update to 1.18.1
Includes fixes for:
* CVE-2022-24675 - encoding/pem: stack overflow
* CVE-2022-28327 - crypto/elliptic: generic P-256 panic when scalar has
  too many leading zeroes

This also adds -buildvcs=false to omit VCS information in Go programs.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-04-15 15:18:12 -07:00
Alexandru Ardelean 1f0244f0c5 django: bump to version 4.0.3
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-04-07 15:32:34 -07:00
Javier Marcet a39470c44d python-websocket-client: update to 1.3.2
- Add support for pre-initialized stream socket in new WebSocketApp
 - Remove rel.saferead() in examples (f0bf03d)
 - Increase scope of linting checks (dca4022)
 - Start adding type hints (a8a4099)

Signed-off-by: Javier Marcet <javier@marcet.info>
2022-04-05 11:10:58 +02:00
Michael Heimpold 8988b0a32f Merge pull request #18143 from mhei/php8-pecl-redis-update
php8-pecl-redis: update to 5.3.7
2022-04-03 20:58:37 +02:00
Michael Heimpold 16a7a82e6c php8-pecl-redis: update to 5.3.7
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2022-04-03 11:17:15 +02:00
Michael Heimpold 5877d902e9 php8-pecl-imagick: update to 3.7.0
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2022-04-03 11:16:52 +02:00
Javier Marcet b82d68e599 python-dotenv: update to v0.20.0
Added:

 - Add encoding (Optional[str]) parameter to get_key, set_key and
 unset_key. (by @bbc2)

Fixed:

 - Use dict to specify the entry_points parameter of setuptools.setup
 (by @mgorny).
 - Don't build universal wheels (by @bbc2).

Signed-off-by: Javier Marcet <javier@marcet.info>
2022-03-31 06:01:58 -07:00