Commit Graph

5015 Commits

Author SHA1 Message Date
Wei-Ting Yang 35797006b7 django: bump to version 6.0.2
Release notes:
https://docs.djangoproject.com/en/dev/releases/6.0/
https://docs.djangoproject.com/en/dev/releases/6.0.1/
https://docs.djangoproject.com/en/dev/releases/6.0.2/

Signed-off-by: Wei-Ting Yang <williamatcg@gmail.com>
(cherry picked from commit b54cc9b69e)
2026-02-18 13:33:34 +02:00
George Sapkin 1a9a82b6d0 golang: replace 1.25 with to 1.26.0
Replace golang1.25 with golang1.26 with version 1.26.0.

Update OS/arch combinations.

Bump bootstrap to 1.24.13.

Link: https://go.dev/doc/go1.26
Link: https://github.com/openwrt/packages/pull/28552
Signed-off-by: George Sapkin <george@sapk.in>
(cherry picked from commit e9e8502f78)
2026-02-13 07:41:37 +02:00
George Sapkin 0131eaa8aa golang: bump 1.25 to 1.25.7
Fixes: CVE-2025-61732
Fixes: CVE-2025-68121
Changes: https://github.com/golang/go/issues?q=milestone%3AGo1.25.7+label%3ACherryPickApproved
Signed-off-by: George Sapkin <george@sapk.in>
(cherry picked from commit 5065a2ff8f)
2026-02-06 10:22:04 +02:00
George Sapkin 6eb055fe52 golang: add support for release candidates
Support building release candidates by setting GO_VERSION_RC to the
release candidate number, e.g. GO_VERSION_RC:=2, and unsetting
GO_VERSION_PATCH.

Signed-off-by: George Sapkin <george@sapk.in>
(cherry picked from commit e013778bac)
2026-02-06 10:22:04 +02:00
George Sapkin cdcdb31c03 golang: add missing 386 and arm64 suffixes
Add missing 386 and arm64 suffixes to -installsuffix so as not to
accidentally mix incompatible binaries.

Signed-off-by: George Sapkin <george@sapk.in>
(cherry picked from commit 35303fb1ab)
2026-02-06 10:22:04 +02:00
George Sapkin 84d5390c50 golang: use upstream OS/arch format
Use OS/arch format used by Go and reported by go tool dist list.

Update OS/arch combinations.

Signed-off-by: George Sapkin <george@sapk.in>
(cherry picked from commit 1eaa1f848b)
2026-02-06 10:22:04 +02:00
George Sapkin 93c0208506 golang: add option to skip building bootstrap
Introduce a new configuration option - GOLANG_BUILD_BOOTSTRAP - that
defaults to enabled:

- When enabled, build the local bootstrap instead of using an external
  one for host Go. If GOLANG_EXTERNAL_BOOTSTRAP_ROOT is set, skip the
  initial 1.4 step.

- When disabled, let Go auto-detect the toolchain or use the toolchain
  specified in GOLANG_EXTERNAL_BOOTSTRAP_ROOT to skip building the
  bootstrap and build host Go using that toolchain directly. Configured
  toolchain must be compatible with the current version of Go.

HOST_BUILD_DEPENDS cannot be conditional, so some Makefile juggling is
needed.

Put menu config under bootstrap only.

Remove unnecessary package-related flags from host-only bootstrap.

Signed-off-by: George Sapkin <george@sapk.in>
(cherry picked from commit 9d8ac9df17)
2026-02-06 10:22:04 +02:00
George Sapkin 8172a03cb7 golang: split src into separate packages
Split misc sources and test data into separate packages. Reduces target
src package size by a third.

Move architecture-dependent generated source from src to the main
package.

Mark doc, misc, src and tests packages with PKGARCH:=all as they don't
have any architecture-specific files.

Fix stripping and strip compiler only.

Fixes: c137c382 ("golang: new packages")
Link: https://github.com/openwrt/packages/pull/28445
Suggested-by: Jeffery To <jeffery.to@gmail.com>
Signed-off-by: George Sapkin <george@sapk.in>
(cherry picked from commit 5657eb0e2e)
2026-02-06 10:22:04 +02:00
George Sapkin a6a29cacc3 golang: install into lib instead of share
Installing into share and symlinking to lib breaks tests:

--- FAIL: TestAllDependencies (0.01s)

    moddeps_test.go:49: findGorootModules didn't find the well-known module "std"

--- FAIL: TestDependencyVersionsConsistent (0.00s)

    moddeps_test.go:356: findGorootModules didn't find the well-known module "std"

Install into lib directly instead.

Fixes: c137c382 ("golang: new packages")
Link: https://github.com/openwrt/packages/pull/28445
Signed-off-by: George Sapkin <george@sapk.in>
(cherry picked from commit 6f4155c0a0)
2026-02-06 10:22:04 +02:00
George Sapkin 7fdf8a401c golang: fix missing dependency check
Add libraries used in test data to extra_provides to pass dependency
checks in package-pack.

Remove unnecessary dependencies.

Fixes: https://github.com/openwrt/packages/issues/27633
Fixes: b2119465 ("golang: Update to 1.24.0")
Link: https://github.com/openwrt/packages/pull/28445
Signed-off-by: George Sapkin <george@sapk.in>
(cherry picked from commit a6e94447f7)
2026-02-06 10:22:04 +02:00
George Sapkin 30f1da5c97 golang: fix generating zbootstrap
Fix setting architecture-specific defaults in zbootstrap.go.

Fixes: b2119465 ("golang: Update to 1.24.0")
Link: https://github.com/golang/go/commit/cce90c1eebb315da7611bb79a7bf807df5a1abd9
Link: https://github.com/openwrt/packages/pull/28445
Suggested-by: Jeffery To <jeffery.to@gmail.com>
Signed-off-by: George Sapkin <george@sapk.in>
(cherry picked from commit 4396682602)
2026-02-06 10:22:04 +02:00
George Sapkin 5b7e7da92f golang: don't set GO_LDSO
Don't set GO_LDSO as it's determined automatically at link time.

Link: https://github.com/golang/go/issues/54197
Link: https://github.com/openwrt/packages/pull/28445
Suggested-by: Jeffery To <jeffery.to@gmail.com>
Signed-off-by: George Sapkin <george@sapk.in>
(cherry picked from commit d7e97387d1)
2026-02-06 10:22:04 +02:00
George Sapkin 679eb8229f golang: avoid expanding Makefile variables
Replace Makefile variables in comments to avoid expanding them
unnecessarily.

Link: https://github.com/openwrt/packages/pull/28445
Signed-off-by: George Sapkin <george@sapk.in>
(cherry picked from commit 97566a8308)
2026-02-06 10:22:04 +02:00
George Sapkin c9b3dc2d9d golang: add generic package definition
Move version definition to a helper file so multiple versions can be
easily defined using it.

Variables HOST_GO_VARS, PKG_GO_ASMFLAGS, PKG_GO_GCFLAGS,
PKG_GO_INSTALL_ARGS, PKG_GO_LDFLAGS, PKG_GO_VARS, and
PKG_GO_ZBOOTSTRAP_MODS are defined using conditional variable
assignment and can be overridden for each go version.

Link: https://github.com/openwrt/packages/pull/28309
Signed-off-by: George Sapkin <george@sapk.in>
(cherry picked from commit 8958c991c9)
2026-01-29 08:08:14 +02:00
George Sapkin 576993a4ec golang: add versioned package for 1.25
Add versioned package for 1.25 to enable having multiple host go
versions side by side.

Set default version to 1.25 in golang-values.mk

Add unversioned dummy package to allow go-based packages to continue
using the default go host version. Packages can use it by specifying:

PKG_BUILD_DEPENDS:=golang/host

or use a specific version out of the ones that are available in that
branch by specifying:

PKG_BUILD_DEPENDS:=golang1.25/host

Host go is exposed to each package through PATH set in
GO_PKG_BUILD_CONFIG_VARS and GO_PKG_VARS.

Target go is installed through alternatives with the default version
having higher priority.

Newer versions can reuse older ones as bootstraps by setting
GO_BOOTSTRAP_VERSION package variable to older version, e.g.:

GO_BOOTSTRAP_VERSION:=1.24

All subpackages provide suffix-less names, e.g. golang, golang-src, etc.
Default versions are marked as default variants.

Link: https://github.com/openwrt/packages/pull/28309
Signed-off-by: George Sapkin <george@sapk.in>
(cherry picked from commit ca501ee61e)
2026-01-29 08:08:14 +02:00
George Sapkin 8afdb7c102 golang: split bootstrap into a separate package
Split bootstrap into a new package to enable multiple versions of go to
reuse the same bootstrap.

Add more source mirrors.

Link: https://github.com/openwrt/packages/pull/28309
Signed-off-by: George Sapkin <george@sapk.in>
(cherry picked from commit 662972a252)
2026-01-29 08:08:14 +02:00
George Sapkin 3aaef31320 golang: add SPDX license identifiers
Link: https://spdx.org/licenses/GPL-2.0-only.html
Link: https://github.com/openwrt/packages/pull/28309
Signed-off-by: George Sapkin <george@sapk.in>
(cherry picked from commit 51aa478bea)
2026-01-29 08:08:14 +02:00
David Mandy 60e11ad76a golang: bump to 1.25.6
Fixes: CVE-2025-61726
Fixes: CVE-2025-61728
Fixes: CVE-2025-61730
Fixes: CVE-2025-61731
Fixes: CVE-2025-68119
Fixes: CVE-2025-68121
Link: https://github.com/golang/go/issues?q=milestone%3AGo1.25.6+label%3ACherryPickApproved
Signed-off-by: David Mandy <smallprogramzhusir@gmail.com>
(cherry picked from commit dbaeeb38d3)
Signed-off-by: George Sapkin <george@sapk.in>
2026-01-29 08:08:14 +02:00
Yanase Yuki ba6b5493a6 lua-lzlib: remove package
This software seems no longer maintained.
The latest upstream commit is 11 years ago,
and upstream repo has been archived.
No package depends on this.

Signed-off-by: Yanase Yuki <dev@zpc.st>
(cherry picked from commit 670f4c023e)
2026-01-28 20:59:53 +02:00
Yanase Yuki a6442c5694 python3-speedtest-cli: remove package
It seems this software is no longer maintained.
The last upstream commit is 4 years ago, and
this software only supports obsolete setup.py.

Users should use supported similar softwares, such
as speedtest-go in packages repo.

Signed-off-by: Yanase Yuki <dev@zpc.st>
(cherry picked from commit 7eea92b91c)
2026-01-28 20:59:53 +02:00
Michael Heimpold 46b1738690 php8: small maintainance cleanups
- align the config option names
- re-order the configuration options
- add some help text
- drop obsolete notes regarding older PHP versions and obsolete CONFLICT
- remove (meanwhile) unrecognized configure options

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 551e00c8fc)
2026-01-27 20:56:48 +01:00
Daniel F. Dickinson 158855005e php8: fix gettext and intl dependencies and build
* Add a needed BUILD_DEPENDENCY on icu package, when PHP8_INTL is
  defined.
* Make PHP8_DOM selecting PHP8_LIBXML instead of depending on it.
* PHP8_INTL does not depend on PHP8_GETTEXT, it builds also
  without gettext.
* Always show option for choosing PHP8_FULLUCIDATA
* For php8-cgi, php-cli, etc, a libstdcpp dependency is only gained
when PHP8_INTL is selected, therefore update those conditional depends.

As some combinations of these changes can change the binaries output,
PKG_RELEASE has been bumped.

Signed-off-by: Daniel F. Dickinson <dfdpublic@wildtechgarden.ca>
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit f8b8ce62c5)
2026-01-27 20:56:48 +01:00
Daniel F. Dickinson a73f1416c7 php8: add more help text and tweak whitespace
Add more menuconfig help text descriptions, and
convert some mixed tabs and spaces to spaces.

Signed-off-by: Daniel F. Dickinson <dfdpublic@wildtechgarden.ca>
(cherry picked from commit 1a01a175fa)
2026-01-27 20:56:48 +01:00
Daniel F. Dickinson 72b19db6c7 php8: fix xmlreader dom circular dependency
xmlreader was selecting package php8-mod-dom as well as depending on
PHP8_DOM, while php8-mod-dom also depended on PHP8_DOM (and therefore
selected PHP8_DOM when php8-mod-dom was selected). This is a Kconfig
recursive dependency, so break the recursion by noting that because
php8-mod-xmlreader selects php8-mod-dom, PHP8_DOM is a transitive
depends, so php8-mod-xmlreader should not depend on PHP8_DOM itself.

Signed-off-by: Daniel F. Dickinson <dfdpublic@wildtechgarden.ca>
(cherry picked from commit 247c1a1964)
2026-01-27 20:56:48 +01:00
Daniel F. Dickinson 029b0bc809 php8: reformat CONFIG_DEPENDS
Switch to a single CONFIG_ per line, and alphabetize.

Signed-off-by: Daniel F. Dickinson <dfdpublic@wildtechgarden.ca>
(cherry picked from commit 8d7faa245a)
2026-01-27 20:56:48 +01:00
Florian Eckert 1ab0b9917a php8: add php8 depends and move compile option to Config.in
The php8 Makefile is already quite large. To improve readability, move
config section to a separate 'Config.in' file. To ensure that the PHP8
option is only saved in '.config' if PHP8 has been selected for building. A
depends on 'PACKAGE_php8' is added to the configuration option in the
'Config.in' file.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 74a3da92b2)
2026-01-27 20:56:48 +01:00
Jens Wagner 333a5f150d perl-www: added dependency on perlbase-module
As mentioned by @tofurky in
https://github.com/openwrt/packages/pull/26781#issuecomment-3703144370
LWP::UserAgent uses Module::Load since 6.71

Signed-off-by: Jens Wagner <jens@wagner2013.de>
(cherry picked from commit 552298e218)
2026-01-25 17:43:19 +02:00
Hirokazu MORIKAWA fa41bc8e4b node: january 13, 2026 Security Releases
HOST BUILD ONLY

Update to 22.22.0
This is a security release.
Notable Changes

    (CVE-2025-59465) add TLSSocket default error handler
    (CVE-2025-55132) disable futimes when permission model is enabled
    lib,permission:
    (CVE-2025-55130) require full read and write to symlink APIs
    src:
    (CVE-2025-59466) rethrow stack overflow exceptions in async_hooks
    src,lib:
    (CVE-2025-55131) refactor unsafe buffer creation to remove zero-fill toggle
    tls:
    (CVE-2026-21637) route callback exceptions through error handlers

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit 3cb4028f46)
2026-01-24 10:06:38 +02:00
Daniel F. Dickinson 64ced5989c python-passlib: remove unmaintained package
passlib is unmaintained since 2020 and a maintained fork called libpass,
which is a drop-in replacement (even using the passlib module name), is
now available. https://github.com/Kozea/Radicale/issues/1952 has more
information.

Therefore we remove the python-passlib package from this repo.

Signed-off-by: Daniel F. Dickinson <dfdpublic@wildtechgarden.ca>
(cherry picked from commit 3de4d24830)
2026-01-23 15:19:11 +07:00
Daniel F. Dickinson ee333daeff python-libpass: add replacement for passlib
passlib has not be updated since 2020 and is therefore a dead project.
Radicale (used in this repo as radicale3) has updated to use libpass (a
maintained fork of passlib): https://github.com/Kozea/Radicale/pull/1953
therefore add python3-libpass to provide libpass, a drop-in replacement
for passlib, and a dependency for Radicale v3.6.0.

Signed-off-by: Daniel F. Dickinson <dfdpublic@wildtechgarden.ca>
(cherry picked from commit ead09d5fd9)
2026-01-23 15:19:11 +07:00
Wei-Ting Yang ebf2977633 python-urllib3: update to 2.6.3
- Fixed HTTPResponse.read_chunked() to properly handle leftover data
  in the decoder's buffer when reading compressed chunked responses.
- Fixed a security issue where decompression-bomb safeguards of the
  streaming API were bypassed when HTTP redirects were followed.
  (CVE-2026-21441)
- Started treating Retry-After times greater than 6 hours as 6 hours
  by default.
- Fixed urllib3.connection.VerifiedHTTPSConnection on Emscripten.

Release notes:
https://github.com/urllib3/urllib3/releases/tag/2.6.2
https://github.com/urllib3/urllib3/releases/tag/2.6.3

Signed-off-by: Wei-Ting Yang <williamatcg@gmail.com>
(cherry picked from commit 295c75a2b9)
2026-01-22 20:53:00 +02:00
Wei-Ting Yang 28bca99ba4 python-urllib3: update to 2.6.1
Fix CVE-2025-66418 and CVE-2025-66471.

Full release notes:
https://github.com/urllib3/urllib3/releases/tag/2.6.0
https://github.com/urllib3/urllib3/releases/tag/2.6.1

Drop 001-setuptools-scm-upper-limit.patch as upstream now supports
setuptools-scm v9.x.

Signed-off-by: Wei-Ting Yang <williamatcg@gmail.com>
(cherry picked from commit 495e4e9287)
2026-01-22 20:53:00 +02:00
Josef Schlehofer c3453a462e python-pika: add new package for radicale3
Pika is a pure-Python implementation of the AMQP 0-9-1 protocol that
tries to stay fairly independent of the underlying network support
library.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit d8437af213)
2026-01-10 12:46:43 +01:00
Wei-Ting Yang d555ca7c08 python-certifi: update to 2026.1.4
Use the latest CA bundle from Mozilla.

Signed-off-by: Wei-Ting Yang <williamatcg@gmail.com>
(cherry picked from commit b1bd9b18ee)
2026-01-09 10:52:13 +01:00
Josef Schlehofer 7b9ef8dfa1 python-pyfuse3: update to version 3.4.1
Release notes:
https://github.com/libfuse/pyfuse3/releases/tag/3.4.1

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 6e8b8fef61)
2026-01-09 10:30:02 +01:00
Daniel F. Dickinson a6a63bd110 tree-wide: remove obsolete SDK in conditionals
Obsolete use of $(SDK) in configure conditionals can result in
dependency errors when building a subset of packages for packages which
have multiple sub-packages.

The reason it causes dependency issues is that (using libdbi-drivers as
an example) lines like:

ifneq ($(SDK)$(CONFIG_PACKAGE_libdbd-sqlite3),)

always evaluate to true if you are compiling in the SDK. So for a user
compiling from the SDK, the configure arguments are always added to the package build.

In the case of libdbi-drivers:

CONFIGURE_ARGS += \
  --with-sqlite3 \
  --with-sqlite3-incdir=$(STAGING_DIR)/usr/include \
  -with-sqlite3-libdir=$(STAGING_DIR)/usr/lib

is always added even if PACKAGE_libdbd-sqlite3 is deselected. When
libdbd-sqlite3 is deselected, this dependency:

DEPENDS:=libdbi +libsqlite3

is not present, so when configure tries to find sqlite3 it fails.

Closes #28173 "tree-wide: obsolete $(SDK) in conditionals"

See also:

* "include: remove SDK exception from package install targets"
  openwrt/openwrt@28f44a4

Performed tree-wide to ease revert if necessary, per:
https://github.com/openwrt/packages/issues/28173#issuecomment-3694615980

Signed-off-by: Daniel F. Dickinson <dfdpublic@wildtechgarden.ca>
(cherry picked from commit 73d8b6c6f3)
2025-12-30 01:08:33 +01:00
Josef Schlehofer c3b54c1b17 python-bcrypt: update to version 5.0.0
Release notes:
https://github.com/pyca/bcrypt/releases/tag/5.0.0

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit b0670ac101)
2025-12-29 23:39:49 +01:00
Josef Schlehofer 3cf3edf45a python3-bottle: update to version 0.13.4
Release notes:
https://github.com/bottlepy/bottle/releases/tag/0.13.4

Add setuptools to PKG_BUILD_DEPENDS to fix:
```
pyproject_hooks._impl.BackendUnavailable: Cannot import 'setuptools.build_meta'
```

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 4f5de42c72)
2025-12-29 23:39:44 +01:00
Josef Schlehofer 1963efd55e luajit2: add riscv64 support
This adds support RISC-V64 to luajit2 by backporting
https://redirect.github.com/openresty/luajit2/pull/236

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 47525f3300)
2025-12-29 12:46:45 +01:00
Ivan Belokobylskiy 9d33f54be4 python-aio-mqtt-mod: update to 0.4.0
Add support of building against python 3.12+
Replace imp module with importlib

Full changelog:
https://github.com/devbis/aio-mqtt/compare/0.3.4...0.4.0

Signed-off-by: Ivan Belokobylskiy <belokobylskij@gmail.com>
2025-12-29 09:01:51 +02:00
George Sapkin 1a6219d979 chicken-scheme: fix EXTRA_DEPENDS
EXTRA_DEPENDS should be used for version constraints. Change to DEPENDS.

Fixes: 6a559a9 ("chicken-scheme: version 5.2.0; include compiler")
Signed-off-by: George Sapkin <george@sapk.in>
(cherry picked from commit 970416925c)
2025-12-25 12:56:07 +02:00
Michael Heimpold f7f50a8694 php8: update to 8.4.16
This fixes:
    - CVE-2025-14177
    - CVE-2025-14178
    - CVE-2025-14180

Upstream changelog:
https://www.php.net/ChangeLog-8.php#8.4.16

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 7b4b55633b)
2025-12-24 11:07:43 +01:00
Michael Heimpold da88909f80 php8: fix dependency of php8-mod-xmlreader to php8-mod-dom
When PHP8_DOM is enabled then xmlreader automatically gains a
dependency to php8-mod-dom, not only when the dom module
is actually built.

So fix it by declaring this dependency.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit e6c59b5188)
2025-12-24 11:07:43 +01:00
Daniel F. Dickinson 62b9d577cf php8: bump PKG_RELEASE
Bump PKG_RELEASE for previous two commits

Signed-off-by: Daniel F. Dickinson <dfdpublic@wildtechgarden.ca>
(cherry picked from commit aa1acc0f21)
2025-12-24 11:07:43 +01:00
Daniel F. Dickinson d3e8dd2881 php8: xml modules affect others
As with gettext modules described in #28078 and #28075, xml and dom
related module selection affects the dependencies of other packages.

Therefore, we invert the dependency logic:

PHP8_LIBXML and PHP8_DOM are are enabled by default and packages
which depend on libxml2 and --enable-dom=shared are not shown (and
the related configure args are disabled) if the config options are
not enabled.

Signed-off-by: Daniel F. Dickinson <dfdpublic@wildtechgarden.ca>
(cherry picked from commit f9591b8518)
2025-12-24 11:07:43 +01:00
Daniel F. Dickinson 48f0206f05 php8: module selection affects other sub-packages
Fixes: php8: global package dependency changes based on module
selection

Fixes: #28078

As described in #28078 and #28075,

Some binaries gain a dependency on libstdcpp when mod-gettext is included
in the build, however this was not explicitly declared, so packaging
fails with (e.g.):

Package php8-cgi is missing dependencies for the following libraries:
libstdc++.so.6

In contrast to #28075, this commit takes the approach:

* Make use of --with-gettext depend on a configure flag (enabled by
  default, since that matches current full build behaviour)
* Make sub-packages which require --with-gettext depend on the
  configure flag

This means that e.g. php-cgi would not have gettext support if the
configure flag was disabled, and e.g. php-mod-gettext and php-mod-intl
would not be selectable.

Signed-off-by: Daniel F. Dickinson <dfdpublic@wildtechgarden.ca>
(cherry picked from commit 6d6233b6b7)
2025-12-24 11:07:43 +01:00
Wesley Gimenes 8a1fff39c9 2to3: remove package
This package is only used by `fail2ban`. After updating `fail2ban` to
`1.1.0` (2a202b2091), the `2to3` package
is no longer needed. If required, anyone can reintroduce the package.

Signed-off-by: Wesley Gimenes <wehagy@proton.me>
(cherry picked from commit df05c12089)
2025-12-23 21:07:52 +01:00
Luiz Angelo Daros de Luca 15884df50a ruby: update to 3.4.8
This release is a routine update that includes bug fixes.

Changelog: https://github.com/ruby/ruby/releases/tag/v3_4_8
Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
(cherry picked from commit 992ccadea0)
2025-12-19 01:52:43 +02:00
Luiz Angelo Daros de Luca c205a2c590 ruby: update to 3.4.7
This release includes some general fixes and a uri gem security fix:

- CVE-2025-61594: URI Credential Leakage Bypass previous fixes

Changelog: https://github.com/ruby/ruby/releases/tag/v3_4_7
Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
(cherry picked from commit 82c3465e66)
2025-12-19 01:52:43 +02:00
Til Kaiser 0b6d2a2859 treewide: remove python3-distutils dependency
As the python3-distutils was dropped while bumping the version
to 3.13.9 via 97a92f2e7a, remove the
python3-distutils from all packages that are currently using it.

OpenWrt already uses recent enough releases of these packages
that have adapted to work without distutils, so the dependency
can be safely removed.

Signed-off-by: Til Kaiser <mail@tk154.de>
2025-12-10 10:49:08 +01:00