openwrt-mirror/packages
1
0 Fork 0
mirror of https://github.com/openwrt/packages.git synced 2026-10-20 13:14:53 +04:00
Code Issues Packages Projects Releases Wiki Activity
33,716 Commits 13 Branches 1 Tag
5ea20ec4f052d127ef8d41a14bf9bf584b409894
Commit Graph
4735 Commits
Author SHA1 Message Date
Josef Schlehofer 5ea20ec4f0 python3: update to version 3.11.4 
In this release, there is updated setuptools, so update
it as well.

Fixes CVEs:
- CVE-2025-47273
- CVE-2024-6345

Release notes:
https://pythoninsider.blogspot.com/2025/10/python-31212-31114-31019-and-3924-are.html

Patch:
- 0001-Adjust-library-header-paths-for-cross-compilation.patch
comes from buildroot [1], but they removed it as they switched to Python 3.12,
however Python 3.11 still supports distutils, but it is marked as deprecated [2]
and it will be gone in 3.12. So, don't rebase it this time as this patch does not apply
anymore due to this commit [3] and sooner switch to more up-to-date Python3 version.

[1] https://redirect.github.com/buildroot/buildroot/commit/b37e4a5f56182c5b8e4ffce433eb652174a19da6
[2] https://peps.python.org/pep-0632/
[3] https://redirect.github.com/pypa/setuptools/commit/88eb8cc66f8762e37ec78913c07ccf3e3dba05e1

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit ef509da52b)
 2025-10-31 12:42:55 +01:00
Josef Schlehofer 9110dd9e2a python-build: update to version 1.3.0 
Release notes:
https://github.com/pypa/build/releases/tag/1.3.0

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 4ba2c1487c)
 2025-10-29 11:53:52 +01:00
Josef Schlehofer abf944ce4e python-flit-core: update to version 3.12.0 
Release notes:
https://github.com/pypa/flit/blob/5714d1f78fb9b344c997cb866c44bb9506b8ca41/doc/history.rst#version-312

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit caed169831)
 2025-10-29 11:53:51 +01:00
Josef Schlehofer 5cf245f6ad python-hatch-requirements-txt: bump to 0.4.1 
Release notes:
https://github.com/repo-helper/hatch-requirements-txt/releases/tag/v0.4.1

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit f182a567aa)
 2025-10-22 12:55:50 +02:00
Felix Fietkau ef893976e7 python3-host.mk: disable pip --no-binary on macOS 
For some reason, pip builds a broken Cython, which segfaults on attempting
to install wheel. Work around this by allowing to use precompiled wheels.

Signed-off-by: Felix Fietkau <nbd@nbd.name>
(cherry picked from commit d798ccce9a)
 2025-10-22 01:09:51 +02:00
W. Michael Petullo 58eb9bbf1d python-networkx: update to 3.5 
Upstream list of changes is available at
https://github.com/networkx/networkx/releases/tag/networkx-3.5.

Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit ac839af473)
 2025-10-22 01:09:12 +02:00
George Sapkin 1326c21ec1 python-trove-classifiers: bump to 2025.9.11.17 
Adds classifier for Python 3.15.
More details can be found in their tags:
https://github.com/pypa/trove-classifiers/releases

Signed-off-by: George Sapkin <george@sapk.in>
(cherry picked from commit d856cb45e3)
 2025-10-22 01:05:38 +02:00
Finn Landweber 9f66360e54 python-setuptools-scm: update to 8.1.0 
Signed-off-by: Finn Landweber <finn@landweber.xyz>
(cherry picked from commit c6989438c3)
 2025-10-22 00:29:03 +02:00
Alexandru Ardelean 0f4782d144 python-lxml: bump to version 5.4.0 
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
(cherry picked from commit eeacf8474b)
 2025-10-22 00:20:09 +02:00
Alexandru Ardelean c1a3e22aaf python-lxml: bump to version 5.3.0 
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
(cherry picked from commit 9060de91b0)
 2025-10-22 00:20:04 +02:00
Wei-Ting Yang 62819b7e56 python-urllib3: update to 2.5.0 
Changelogs can be found in https://github.com/urllib3/urllib3/releases.

Signed-off-by: Wei-Ting Yang <williamatcg@gmail.com>
(cherry picked from commit c6ba0ce292)
 2025-10-21 23:49:43 +02:00
Josef Schlehofer e160ba18d5 python-hatchling: update to version 1.27.0 
Release notes:
https://github.com/pypa/hatch/releases/tag/hatchling-v1.27.0

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 4d521dfbeb)
 2025-10-21 23:49:42 +02:00
Wei-Ting Yang fb35b87809 python-packaging: update to 25.0 
Changelogs can be found in https://github.com/pypa/packaging/releases.

Signed-off-by: Wei-Ting Yang <williamatcg@gmail.com>
(cherry picked from commit 7289cb0119)
 2025-10-21 23:49:42 +02:00
Austin Lane 0af825465e python-pyelftools: Update to v0.32 
- Update pyelftools to version 0.32 (minor)

Signed-off-by: Austin Lane <vidplace7@gmail.com>
(cherry picked from commit f2d141912f)
 2025-10-02 22:15:00 +02:00
Austin Lane 28ff64bed9 python-pyelftools: add package / hostbuild 
Signed-off-by: Austin Lane <vidplace7@gmail.com>
(cherry picked from commit dc79b54b57)
 2025-10-02 22:15:00 +02:00
Michael Heimpold 9d839fe5a7 php8: update to 8.3.26 
Upstream changelog:
https://www.php.net/ChangeLog-8.php#8.3.26

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
 2025-10-01 19:46:35 +02:00
Jeffery To b0c81b768d golang: Fix host build compatibility with GCC 15 
Fixes https://github.com/openwrt/packages/issues/26446.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit f7d2ebfe37)
 2025-09-24 12:15:55 +02:00
Wei-Ting Yang 44cff71992 python-certifi: update to 2025.8.3 
Fix CVE-2024-39689.

Signed-off-by: Wei-Ting Yang <williamatcg@gmail.com>
(cherry picked from commit 6d9d0d2bf8)
 2025-09-20 23:24:32 +08:00
Wei-Ting Yang d490217d82 python-certifi: assign PKG_CPE_ID 
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:certifi:certifi

Signed-off-by: Wei-Ting Yang <williamatcg@gmail.com>
(cherry picked from commit dc6724fca5)
 2025-09-20 23:24:32 +08:00
Aleksey Vasilenko 98d7b31c8e rust: update to 1.89.0 
- switch source archive to tar.xz to save space and bandwidth
- refresh a patch

Signed-off-by: Aleksey Vasilenko <aleksey.vasilenko@gmail.com>
(cherry picked from commit 10862df850)
 2025-09-19 20:24:37 +08:00
Michael Heimpold dd6e009bde php8: update to 8.3.25 
Upstream changelog:
https://www.php.net/ChangeLog-8.php#8.3.25

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
 2025-09-17 07:28:20 +02:00
Tianling Shen a94519e649 rust: add loongarch64 and powerpc to supported targets 
Also removed i686 as OpenWrt replaces it with i386 in $(ARCH).

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit a5c3fd1fee)
 2025-09-13 10:16:22 +02:00
Richard Muzik 7e010914b3 python-twisted: Update to 25.5.0 
This update fixes CVE-2024-41810 and CVE-2024-41671 [1]. For the full
changelog see NEWS [2].

Additionally changed the way the test files are omitted from patch file
to filespec in the Makefile.

[1] https://github.com/twisted/twisted/blob/twisted-25.5.0/NEWS.rst#twisted-2470-2024-08-08
[2] https://github.com/twisted/twisted/blob/twisted-25.5.0/NEWS.rst

Signed-off-by: Richard Muzik <richard.muzik@turris.com>
(cherry picked from commit e09ffebce1)
 2025-09-11 08:00:59 +02:00
Luiz Angelo Daros de Luca 014c5ffa11 ruby: update to 3.3.9 
3.3.9 release includes the following security fix of default gems:

- CVE-2025-24294: Possible Denial of Service in resolv gem

And the following fixes for build issues:

- GCC 15.1
- Visual Studio 2022 Version 17.14

3.3.7 and 3.3.8 are routine update that includes minor bug fixes.

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
(cherry picked from commit 59880e81a6)
 2025-09-11 08:00:34 +02:00
Luiz Angelo Daros de Luca b5fffec056 ruby: update to 3.3.6 
Ruby 3.3.6 is a routine update that includes minor bug fixes. It also
stops warning missing default gem dependencies that will be bundled gems
in Ruby 3.5.

Link: https://github.com/ruby/ruby/releases/tag/v3_3_6
Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
(cherry picked from commit 2b999558db)
 2025-09-11 08:00:34 +02:00
Daniel Golle c0e97f89be ruby: include JSON modules in host build 
Ruby JSON modules are used to build WebKitGTK.
Include them in the host build.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit c667ae2efb)
 2025-09-11 08:00:34 +02:00
Josef Schlehofer 2f6357377d python3: update to version 3.11.13 
Release notes:
https://docs.python.org/release/3.11.13/whatsnew/changelog.html#python-3-11-13

Fixes CVEs:
CVE 2024-12718
CVE 2025-4138
CVE 2025-4330
CVE 2025-4517

Patch refreshed

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 3686cbe417)
 2025-09-11 08:00:33 +02:00
Wei-Ting Yang 091d10162a python-urllib3: update to 2.0.7 
Fix CVE-2023-45803 and CVE-2023-43804.

Full changelogs:
- https://github.com/urllib3/urllib3/releases/tag/v2.0.5
- https://github.com/urllib3/urllib3/releases/tag/2.0.6
- https://github.com/urllib3/urllib3/releases/tag/2.0.7

Signed-off-by: Wei-Ting Yang <williamatcg@gmail.com>
(cherry picked from commit 23646be59e)
 2025-08-22 16:13:26 +03:00
Tianling Shen c21161cc5b rust: read build path from {HOST_}MAKE_PATH 
Allow set build path by `{HOST_}MAKE_PATH`.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 84cb850b7f)
 2025-08-22 17:10:23 +08:00
Tianling Shen 3ac4d7b69a rust: introduce RUST_{HOST,PKG}_LOCKED flag 
Introduce `RUST_{HOST,PKG}_LOCKED` flag (enabled by default) to respect
upstream lockfile. This can be disabled by setting it to 0 if you want
to have up-to-date dependencies.

This change also adds new `CARGO_{HOST,PKG}_ARGS` variable to pass extra
build arguments to cargo.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 1000e99185)
 2025-08-22 17:10:21 +08:00
George Sapkin d7ce96f2d2 golang: bump to 1.23.12 
go1.23.12 (released 2025-08-06) includes security fixes to the
database/sql and os/exec packages, as well as bug fixes to the runtime.

Fixes: CVE-2025-47907
Link: https://github.com/golang/go/issues?q=milestone%3AGo1.23.12+label%3ACherryPickApproved
Signed-off-by: George Sapkin <george@sapk.in>
 2025-08-18 23:39:04 +02:00
Tianling Shen fee8f2446f golang: disable build for powerpc64 
e5500 is the only powerpc64 target we have in tree, but it's not
supported by golang[1]. Since it's hard to opt e5500 out from the
supported arch list, simply remove powerpc64 from it for now.

1. https://github.com/golang/go/issues/19074

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit c8ad05854d)
 2025-08-06 18:59:38 +08:00
Michael Heimpold 3ae8b6f406 php8: update to 8.3.24 
Upstream changelog:
https://www.php.net/ChangeLog-8.php#8.3.24

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
 2025-08-04 08:28:34 +02:00
Richard Muzik a4ef5c8971 python-incremental: Update to 24.7.2 
To see changes check NEWS [1].

[1] https://github.com/twisted/incremental/blob/incremental-24.7.2/NEWS.rst

Signed-off-by: Richard Muzik <richard.muzik@turris.com>
(cherry picked from commit 63b3e10116)
 2025-07-30 12:00:32 +02:00
Luca Barbato 250ba60c52 rust: update to 1.87.0 
Simplify the build invocation and reorder the target list to avoid
failures due the build process changes.

Signed-off-by: Luca Barbato <lu_zero@gentoo.org>
(cherry picked from commit 95eef0fd58)
 2025-07-30 14:46:22 +08:00
Rosen Penev c7b68fb51c python3: update to 3.11.10 
Just a security bugfix.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit f2d5c861bd)
 2025-07-18 11:59:50 +02:00
Sean Khan 9684653566 python3: Bump version 3.11 to 3.11.9 
Also bumps setuptools to version 24.0

Run tested: aarch64, Dynalink DL-WRX36, Master Branch

Maintainer: Jeffery To <jeffery.to@gmail.com>

Signed-off-by: Sean Khan <datapronix@protonmail.com>
(cherry picked from commit 49e3c330d4)
 2025-07-18 11:59:44 +02:00
Josef Schlehofer 45a9470246 python-uci: update to version 0.10.3 + two patches 
Release notes:
https://gitlab.nic.cz/turris/pyuci/-/tags/v0.10.0
https://gitlab.nic.cz/turris/pyuci/-/tags/v0.10.1
https://gitlab.nic.cz/turris/pyuci/-/tags/v0.10.2
https://gitlab.nic.cz/turris/pyuci/-/tags/v0.10.3

Upstream (pyuci developers) removed setup.py,
I bring it back to be able to compile it despite
that we do support building packages, which are
using pyproject.toml, but the thing here is
that their pyproject.toml requires setuptools 74.1.0
[1] [2], but Python 3.11 is using bundled setuptools
and pip [3] [4]. In current version 3.11.13,
there is still outdated version of setuptools, but
it looks like that in the newer version, there will be
new one [5].

Once, there is released Python 3.11.14 and updated
in OpenWrt, these patches can be dropped.

[1] https://gitlab.nic.cz/turris/pyuci/-/blob/240180b2946fdd1fd46c7f023f224acce5a55511/pyproject.toml#L29
[2] https://setuptools.pypa.io/en/stable/history.html#v74-1-0
[3] https://github.com/openwrt/packages/blob/c94ab433caf345ebc6bef9a7174d1f65f676fc87/lang/python/python3-version.mk#L18
[4] https://github.com/python/cpython/commits/3.11/Lib/ensurepip/_bundled
[5] https://github.com/python/cpython/commit/c96ab19ae460911e40ffa502f1bf945ab6c53a2e

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit d457c26c0d)
 2025-07-18 11:35:19 +02:00
Javier Marcet c5b8f0a5e0 luajit2: update to v2.1-20250529 
For changes, see tagged commit:
https://github.com/openresty/luajit2/releases/tag/v2.1-20250529

Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit 157d881e65)
 2025-07-18 09:39:47 +02:00
Javier Marcet 3296488f71 luajit2: update to v2.1-20250117 
See: https://github.com/openresty/luajit2/releases/tag/v2.1-20250117

Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit 1a05910478)
 2025-07-18 09:39:46 +02:00
Javier Marcet ce106b22ed luajit2: update to v2.1-20241113 
Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit 6df4c936d6)
 2025-07-18 09:39:46 +02:00
Javier Marcet d09512d48d luajit2: update to v2.1-20241104 
Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit 5d3e411662)
 2025-07-18 09:39:46 +02:00
Austin Lane 978dfa5be0 python-click: add hostbuild 
Signed-off-by: Austin Lane <vidplace7@gmail.com>
(cherry picked from commit 117a3a2b1b)
 2025-07-15 15:07:08 +02:00
George Sapkin 65f50b7baa golang: bump to 1.23.11 
go1.23.11 (released 2025-07-08) includes security fixes to the go
command, as well as bug fixes to the compiler, the linker, and the
runtime.

Link: https://github.com/golang/go/issues?q=milestone%3AGo1.23.11+label%3ACherryPickApproved
Signed-off-by: George Sapkin <george@sapk.in>
 2025-07-09 08:38:20 +02:00
Fabrice Fontaine bd3960dc33 lang/tcl: fix PKG_CPE_ID 
tcl:tcl is a better CPE ID than tcl_tk:tcl_tk as this CPE ID has the
latest CVE (whereas tcl_tk:tcl_tk only has CVEs up to 2008):
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:tcl:tcl

Fixes: 299e5b0a9b (treewide: add PKG_CPE_ID for better cvescanner coverage)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
(cherry picked from commit 6de9eebf51)
 2025-06-30 10:18:26 +02:00
George Sapkin af76294d1f golang: bump to 1.23.10 
go1.23.10 (released 2025-06-05) includes security fixes to the net/http
and os packages, as well as bug fixes to the linker.

Fixes CVE-2025-4673

Link: https://github.com/golang/go/issues?q=milestone%3AGo1.23.10+label%3ACherryPickApproved
Signed-off-by: George Sapkin <george@sapk.in>
 2025-06-16 18:23:37 +08:00
Austin Lane a6f877bee7 python-pyserial: add hostbuild 
Signed-off-by: Austin Lane <vidplace7@gmail.com>
(cherry picked from commit ac212e0c43)
 2025-06-11 22:10:26 +02:00
Austin Lane 32083d152c python-requests: add hostbuild 
Signed-off-by: Austin Lane <vidplace7@gmail.com>

(cherry picked from commit edf093ff04)
 2025-06-11 22:10:04 +02:00
Austin Lane d0b8fe2731 python-urllib3: add hostbuild 
Signed-off-by: Austin Lane <vidplace7@gmail.com>

(cherry picked from commit d6c644c5f5)
 2025-06-11 22:10:04 +02:00
Austin Lane 0cce9c40b5 python-certifi: add hostbuild 
Signed-off-by: Austin Lane <vidplace7@gmail.com>

(cherry picked from commit 955976cee7)
 2025-06-11 22:10:04 +02:00