Commit Graph
4018 Commits
Author SHA1 Message Date
Jeffery To 8a36b03870 Merge pull request #20801 from jefferyto/python-pyproject
python: Add proper support for pyproject.toml-based builds, update Python packages for new build process
2023-05-10 12:11:07 +08:00
Jeffery To 22b86d6e8d golang: Update to 1.20.4
Includes fixes for:
* CVE-2023-24539: html/template: improper sanitization of CSS values
* CVE-2023-24540: html/template: improper handling of JavaScript
  whitespace
* CVE-2023-29400: html/template: improper handling of empty HTML
  attributes

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-05-08 12:14:54 +08:00
Jeffery To 54c1303dc4 python-hatchling: Update to 1.14.1
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-05-04 14:10:43 +08:00
Jeffery To fe0dc6f48a python-hatchling: Update to 1.14.0
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-05-01 13:34:40 +03:00
Jeffery To 7dc6b103c5 python-trove-classifiers: Add new host-only package
From the README:

Canonical source for classifiers on PyPI.

Classifiers categorize projects per PEP 301. Use this package to
validate classifiers in packages for PyPI upload or download.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-05-01 13:34:40 +03:00
Jeffery To f4a18fbd3d python-calver: Add new host-only package
From the README:

The calver package is a setuptools extension for automatically defining
your Python package version as a calendar version.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-05-01 13:34:40 +03:00
Stepan Henek eb7275402e python-eventlet: bump to version 0.33.3
old eventlet is not working well with python3.10

```
root@turris:~# python3
Python 3.10.9 (main, Feb  9 2023, 10:37:45) [GCC 11.2.0] on linux
Type "help", "copyright", "credits" or "license" for more information.
>>> import eventlet
Traceback (most recent call last):
  File "<stdin>", line 1, in <module>
  File "/usr/lib/python3.10/site-packages/eventlet/__init__.py", line 17, in <module>
  File "/usr/lib/python3.10/site-packages/eventlet/convenience.py", line 7, in <module>
  File "/usr/lib/python3.10/site-packages/eventlet/green/socket.py", line 4, in <module>
  File "/usr/lib/python3.10/site-packages/eventlet/green/_socket_nodns.py", line 11, in <module>
  File "/usr/lib/python3.10/site-packages/eventlet/greenio/__init__.py", line 3, in <module>
  File "/usr/lib/python3.10/site-packages/eventlet/greenio/base.py", line 32, in <module>
  File "/usr/lib/python3.10/site-packages/eventlet/timeout.py", line 166, in wrap_is_timeout
TypeError: cannot set 'is_timeout' attribute of immutable type 'TimeoutError'
```

see 0.33.3 release notes for details - https://eventlet.net/doc/changelog.html#id1

Signed-off-by: Stepan Henek <stepan.henek@nic.cz>
2023-04-29 13:43:16 +03:00
Luiz Angelo Daros de Luca 39c14b859a ruby: statically link extensions into host ruby
Ruby uses extensions (.so files) that might also depend on other
libraries. When the linker builds an executable, it will refer to the
path it found the library, including those in the stagging dir. However,
when it links a shared library (like ruby exts), it will let that
dependency to be resolved at runtime.

During host and target build, ruby build script runs ruby scripts. When
it loads a ext that depends on another library, it will, by default,
look for the system libraries to satisfy that, breaking the build when
it fails. Setting LD_LIBRARY_PATH to the stagging lib dir is a valid
workaround.

Ruby can also be built statically linking all exts into ruby executable.
That will make the linker point to the stagging library path, fixing the
issue. It was used in the past but, at some point, ruby broke it. Now it
is working as expected.

Closes #20839

While at it, clean up excluded extensions not used by host ruby.

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2023-04-25 14:48:17 -03:00
Jeffery To a35431f2bf python: Update find stdlib script
This updates the python3-find-stdlib-depends.sh script for these
changes:

* The gdbm (dbm.gnu) package was merged into the dbm package in
  78f6c2c5ad.

* The uuid module was split into a separate package in
  4e05541782.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-04-25 07:49:53 +03:00
Jeffery To 743204ff2d python-idna: Update to 3.4
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-04-25 07:48:47 +03:00
Jeffery To 36587eced2 python-zope-interface: Update to 6.0, refresh patch
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-04-25 07:48:14 +03:00
Jeffery To 977d8e5a6f python-pyasn1: Update to 0.5.0
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-04-25 07:47:33 +03:00
Jeffery To b1b008f42f python-packages: Clean up build variables
* Rename PYTHON3_PKG_SETUP_VARS to PYTHON3_PKG_BUILD_VARS, and
  PYTHON3_PKG_SETUP_DIR to PYTHON3_PKG_BUILD_PATH

  The new variable names emphasize that these values apply to the new
  build process.

* Remove PYTHON3_PKG_SETUP_ARGS set to the empty string

  These were set to override the default arguments in the old build
  process and not applicable to the new build process.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-04-24 16:22:03 +08:00
Jeffery To 63d13aa15f python-libraries: Update build options
This updates the build options for these packages to work with the
pyproject.toml-based build process, and removes
PYTHON3_PKG_FORCE_DISTUTILS_SETUP:=1.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-04-24 16:20:35 +08:00
Jeffery To 30bd279461 python-typing-extensions: Update to 4.5.0, add myself as maintainer
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-04-24 16:20:35 +08:00
Jeffery To 84d9831dcb python-packaging: Remove BROKEN
With proper support of pyproject.toml-based builds in place, this
package will now build.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-04-24 16:20:34 +08:00
Jeffery To 107e037763 python-jsonschema: Remove previous build workaround
With proper support for pyproject.toml-based builds in place, this is no
longer necessary.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-04-24 16:20:34 +08:00
Jeffery To 7734502693 python-exceptiongroup: Remove previous build workaround
With proper support for pyproject.toml-based builds in place, this is no
longer necessary.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-04-24 16:20:34 +08:00
Jeffery To 628202d269 python-astral: Remove BROKEN
With proper support for pyproject.toml-based builds in place, this
package will now build.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-04-24 16:20:33 +08:00
Jeffery To 5156c0c82b python: Add proper support for pyproject.toml-based builds
This removes the changes made in
61f202c017 and adds actual support for
pyproject.toml-based (PEP 517) builds of Python packages.

Packages can force the use of the old build process by setting
PYTHON3_PKG_FORCE_DISTUTILS_SETUP:=1; this should only be a temporary
workaround until the package can be updated/fixed to use the new build
process.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-04-24 16:20:33 +08:00
Jeffery To e6ae9e29d5 python-libraries: Force old build process
These packages will need adjustments to work with pyproject.toml-based
builds, so set PYTHON3_PKG_FORCE_DISTUTILS_SETUP:=1 to force the old
build process (when pyproject.toml-based builds are in place) for now.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-04-24 16:19:49 +08:00
Jeffery To 4a7173d27d python-ubus: Force old build process
This package will not build with the pyproject.toml-based build process
because it has a build dependency on pytest-runner[1].

pytest-runner has been deprecated[2], so instead of adding a package for
pytest-runner to fulfill the build dependency, force this package to use
the old build process.

[1]: https://gitlab.nic.cz/turris/python-ubus/-/blob/v0.1.1/setup.py#L35
[2]: https://github.com/pytest-dev/pytest-runner#deprecation-notice

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-04-24 16:19:45 +08:00
Jeffery To 56b10770fc python-twisted: Update to 22.10.0
Includes fix for CVE-2022-39348 (NameVirtualHost Host header injection).

This adds a build dependency that will be required for
pyproject.toml-based builds.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-04-24 16:18:17 +08:00
Jeffery To 17d5bf224c python-pytest-forked: Update to 1.6.0
The overly-strict build requirements in 1.3.0[1] would cause a build
failure with pyproject.toml-based builds.

[1]: https://github.com/pytest-dev/pytest-forked/blob/v1.3.0/pyproject.toml#L2

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-04-24 16:18:17 +08:00
Jeffery To c7820e4fb1 python-pytest: Update to 7.3.0
This also removes BROKEN from the package.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-04-24 16:18:17 +08:00
Jeffery To 550c29368e python-pycrate: Update to 0.6.0
This also changes the download to PyPI and updates several package
makefile fields.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-04-24 16:18:16 +08:00
Jeffery To b1a8e4769f python-jsonschema: Add build dependencies
These will be required for pyproject.toml-based builds.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-04-24 16:18:16 +08:00
Jeffery To 8d81b67327 python-incremental: Update to 22.10.0, redo patch, add host build
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-04-24 16:18:16 +08:00
Jeffery To 59b7a81964 python-exceptiongroup: Update to 1.1.1
This adds a build dependency that will be required for
pyproject.toml-based builds.

This also removes the run-time dependency on python3-attrs; there is no
indication this package is required.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-04-24 16:18:15 +08:00
Jeffery To be90d8aecd python-docker: Add missing build dependency
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-04-24 16:18:15 +08:00
Jeffery To 68c0c77df6 python-dns: Update to 2.3.0
This adds a build dependency that will be required for
pyproject.toml-based builds.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-04-24 16:18:15 +08:00
Jeffery To b78c8ff918 python-dbus-fast: Add build dependencies
These will be required for pyproject.toml-based builds.

This also includes a patch to unpin the version requirement for
setuptools, as the current in-repo version of setuptools does not
fulfill this requirement, and there does not appear to be any specific
reason why this version requirement is necessary.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-04-24 16:18:15 +08:00
Jeffery To 0b5091bbff python-cryptography: Update patch to disable Rust
This extends the patch to also apply for pyproject.toml-based builds.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-04-24 16:18:14 +08:00
Jeffery To 159895b794 python-bleak: Add build dependency
This will be required for pyproject.toml-based builds.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-04-24 16:18:14 +08:00
Jeffery To 1a1b444571 python-astral: Update to 3.2
This adds a build dependency that will be required for
pyproject.toml-based builds.

This also marks the package as BROKEN (for now) as it requires proper
support for pyproject.toml-based builds.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-04-24 16:18:14 +08:00
Jeffery To 6649314a03 borgbackup: Add missing build dependencies
setuptools-scm is a declared build dependency[1], and pkgconfig will
allow setup to find the required libraries, replacing the need to set
environment variables.

[1]: https://github.com/borgbackup/borg/blob/1.2.4/setup.py#L313

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-04-24 16:18:14 +08:00
Jeffery To d7bc1deb0e python-pkgconfig: Add new host-only package
From the README:

pkgconfig is a Python module to interface with the pkg-config command
line tool for Python 3.3+.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-04-24 16:18:13 +08:00
Paul Fertser 0c10c224be treewide: remove AUTORELEASE
Automatically compute and substitute current values for all
$(AUTORELEASE) instances as this feature is deprecated and shouldn't be
used.

The following temporary change was made to the core:

diff --git a/rules.mk b/rules.mk
index 57d7995d4fa8..f16367de87a8 100644
--- a/rules.mk
+++ b/rules.mk
@@ -429,7 +429,7 @@ endef
 abi_version_str = $(subst -,,$(subst _,,$(subst .,,$(1))))

 COMMITCOUNT = $(if $(DUMP),0,$(call commitcount))
-AUTORELEASE = $(if $(DUMP),0,$(call commitcount,1))
+AUTORELEASE = $(if $(DUMP),0,$(shell sed -i "s/\$$(AUTORELEASE)/$(call commitcount,1)/" $(CURDIR)/Makefile))

 all:
 FORCE: ;

And this command used to fix affected packages:

for i in $(cd feeds/packages; git grep -l PKG_RELEASE:=.*AUTORELEASE | \
                              sed 's^.*/\([^/]*\)/Makefile^\1^';);
do
  make package/$i/download
done

Signed-off-by: Paul Fertser <fercerpav@gmail.com>
2023-04-21 22:46:58 +02:00
Luca Barbato 1f9baddd43 rust: update to 1.69.0
Signed-off-by: Luca Barbato <lu_zero@gentoo.org>
2023-04-21 06:09:47 +08:00
Michael Heimpold 8043007879 php8: update to 8.2.5
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2023-04-16 16:39:10 +03:00
Jeffery To f59b088adb python-cython: Update to 0.29.34
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-04-15 19:22:06 +08:00
Hirokazu MORIKAWA bc1ac271e8 node: bump to v18.16.0
Description:
Update to v18.16.0
Fixed a bug when selecting arm-fpu for vfpv3-d16.

Notable changes
Add initial support for single executable applications
Replace url parser with Ada

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2023-04-14 21:15:16 +08:00
Tianling Shen f659dfe9f7 golang: Update to 1.20.3
Included fixes for:
- CVE-2023-24534
- CVE-2023-24536
- CVE-2023-24537
- CVE-2023-24538

Refreshed patches.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2023-04-14 00:28:12 +08:00
Luiz Angelo Daros de Luca 0cf46d43f4 ruby: update to 3.2.2
This release includes security fixes. Please check the topics below for
details.

- CVE-2023-28755: ReDoS vulnerability in URI
- CVE-2023-28756: ReDoS vulnerability in Time

See https://github.com/ruby/ruby/releases/tag/v3_2_2 for further details.

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2023-04-11 16:48:16 -03:00
Luiz Angelo Daros de Luca 3456881e85 ruby: update to 3.2.1
Ruby 3.2 changes include:
* WASI based WebAssembly support
* Production-ready YJIT
* Regexp improvements against ReDoS
See: https://www.ruby-lang.org/en/news/2022/12/25/ruby-3-2-0-released/

Ruby 3.2.1 changes includes:
* Bugfixes
See: https://www.ruby-lang.org/en/news/2023/02/08/ruby-3-2-1-released/

Package-related changes are:

* libyaml is no longer bundled, requiring OpenWrt to build it as a host
  library for ruby/host.
* Added sub-packages:
 - ruby-mjit: files for mJIT, although disabled during build
 - ruby-syntax_suggest: finds missing ends
* Backported patches dropped:
 - 001-fix-build-with-libressl-3.5.patch
 - 002-fix-operator-precedence.patch
* Usual dependencies adjustments

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2023-04-11 16:48:16 -03:00
Quintin Hill 408502ee0a python3-ble2mqtt: add init script
Note that init script won't do much without configuration provided.
The init script comes from the upstream README file.

Also add missing dependency.

Signed-off-by: Quintin Hill <stuff@quintin.me.uk>
2023-04-11 17:24:51 +08:00
Quintin Hill 3f977e711e python3-bleak: bump to 0.20.1
This has a small fix on top of 0.20.0.

Signed-off-by: Quintin Hill <stuff@quintin.me.uk>
2023-04-11 17:24:51 +08:00
Andre Heider 4400e97473 treewide: opt out of LTO usage
These fail to build or packages depending on them do when enabling
CONFIG_USE_LTO.

Signed-off-by: Andre Heider <a.heider@gmail.com>
2023-04-08 08:38:54 +02:00
Andre Heider 35f4ef76e0 treewide: refactor to use PKG_BUILD_FLAGS:=gc-sections
See commit da370098 "treewide: add support for "gc-sections" in
PKG_BUILD_FLAGS" on the main repository.

Note: This only touches packages which use all three parts
(-ffunction-sections, -fdata-sections and -Wl,--gc-sections) enabled by
this build flag. Some packages only use a subset, and these are left
unchanged for now.

Signed-off-by: Andre Heider <a.heider@gmail.com>
2023-04-08 08:38:54 +02:00
Andre Heider 565866a472 treewide: refactor to use PKG_BUILD_FLAGS:=no-mips16
See commit 5c545bdb "treewide: replace PKG_USE_MIPS16:=0 with
PKG_BUILD_FLAGS:=no-mips16" on the main repository.

Signed-off-by: Andre Heider <a.heider@gmail.com>
2023-04-08 08:38:54 +02:00