Commit Graph

5392 Commits

Author SHA1 Message Date
Alexandru Ardelean e0ed322c0c python-flit-scm: drop package
No longer needed by any package in the feed.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-06-14 08:21:45 +03:00
George Sapkin 7fe08b4652 golang: bump 1.26 to 1.26.4
Fixes: CVE-2026-27145
Fixes: CVE-2026-42504
Fixes: CVE-2026-42507
Changes: https://github.com/golang/go/issues?q=milestone%3AGo1.26.4+label%3ACherryPickApproved
Signed-off-by: George Sapkin <george@sapk.in>
2026-06-14 00:51:12 +03:00
George Sapkin 6149f90711 golang: use upstream build ID logic
Don't override the upstream build ID logic to hopefully improve
reproducibility.

Signed-off-by: George Sapkin <george@sapk.in>
2026-06-14 00:51:12 +03:00
Alexandru Ardelean 4f5b1824c9 python-chardet: drop package
python-requests now uses charset-normalizer and nothing else in the
feed depends on it.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-06-12 12:26:50 +02:00
Alexandru Ardelean dcc90f1920 python-requests: use charset-normalizer instead of chardet
Switch runtime and host build deps from chardet to charset-normalizer,
the mandatory charset-detection backend since requests 2.26. Extend
test.sh to cover the new backend and bump PKG_RELEASE.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-06-12 12:26:50 +02:00
Alexandru Ardelean 9c97b73b1a python-charset-normalizer: add host build
Add a HostBuild variant so it can be used as a /host build dependency,
mirroring python-certifi/idna/urllib3.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-06-12 12:26:50 +02:00
Alexandru Ardelean 81b237d43a python-toml: drop package
No idea if this is used.
It's a pure python package.
No other packages depend on this.
Can be installed via pip on device.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-06-11 19:56:36 +03:00
Alexandru Ardelean 3993db02bd python-pyparsing: drop package
No idea if this is used.
It's a pure python package.
No other packages depend on this.
Can be installed via pip on device.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-06-11 19:56:36 +03:00
Alexandru Ardelean a06fb85350 python-apipkg: drop package
No idea if this is used.
It's a pure python package.
No other packages depend on this.
Can be installed via pip on device.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-06-11 19:56:36 +03:00
Alexandru Ardelean 8338b02877 python-incremental: add test-version.sh generic version-check override
The incremental CLI requires an "update" subcommand and prints a usage
error instead of a version for the flags the generic check probes, so it
fails generic tests (e.g. when python3 is bumped). Override it; test.sh
still covers functionality.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-06-09 17:18:01 +03:00
Alexandru Ardelean f5490954f5 python-automat: drop broken automat-visualize entry point
The package excludes automat/_visualize.py (it needs the optional graphviz
dependency), but the automat-visualize console script was still installed and
imports that module, so it failed at runtime and broke the CI generic test.
Skip the /usr/bin install so the package ships as a pure library.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-06-09 17:18:01 +03:00
Alexandru Ardelean e266bed8d8 python-greenlet: bump to 3.5.1
Refresh sha256 from PyPI sdist.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-06-09 17:18:01 +03:00
Alexandru Ardelean 2e6e0b6b4c python-twisted: bump to 26.4.0
Refresh sha256 from PyPI sdist.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-06-09 17:18:01 +03:00
Alexandru Ardelean 44b58e0922 python-s3transfer: bump to 0.18.0
Refresh sha256 from PyPI sdist.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-06-09 17:18:01 +03:00
Georgi Valkov aa32dd256e rust: fix host build on x64 Darwin
rust/host fails to compile on macOS running on Intel x64
because the host target triple is autogenerated to be
'arm64-unknown-linux-'. Rust doesn't have such a target triple, thus the
build fails because there are no pre-built artefacts for bootstrapping.

Fix this by setting RUSTC_HOST_ARCH to 'x86_64-apple-darwin' in case
our host is HOST_ARCH=x86_64 and HOST_OS=Darwin.
This fix is based on the existing fix for Apple silicon [1].

Fixes:
  File "/Volumes/pepe/py/openwrt/build_dir/target-x86_64_musl/host/rustc-1.96.0-src/x.py", line 53, in <module>
    bootstrap.main()
    ~~~~~~~~~~~~~~^^
  File "/Volumes/pepe/py/openwrt/build_dir/target-x86_64_musl/host/rustc-1.96.0-src/src/bootstrap/bootstrap.py", line 1418, in main
    bootstrap(args)
    ~~~~~~~~~^^^^^^
  File "/Volumes/pepe/py/openwrt/build_dir/target-x86_64_musl/host/rustc-1.96.0-src/src/bootstrap/bootstrap.py", line 1366, in bootstrap
    build.download_toolchain()
    ~~~~~~~~~~~~~~~~~~~~~~~~^^
  File "/Volumes/pepe/py/openwrt/build_dir/target-x86_64_musl/host/rustc-1.96.0-src/src/bootstrap/bootstrap.py", line 697, in download_toolchain
    download_component(download_info)
    ~~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^
  File "/Volumes/pepe/py/openwrt/build_dir/target-x86_64_musl/host/rustc-1.96.0-src/src/bootstrap/bootstrap.py", line 529, in download_component
    get(
    ~~~^
        download_info.base_download_url,
        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
    ...<3 lines>...
        verbose=download_info.verbose,
        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
    )
    ^
  File "/Volumes/pepe/py/openwrt/build_dir/target-x86_64_musl/host/rustc-1.96.0-src/src/bootstrap/bootstrap.py", line 58, in get
    raise RuntimeError(
    ...<6 lines>...
    )
RuntimeError: src/stage0 doesn't contain a checksum for dist/2026-04-16/rust-std-1.95.0-x86_64-unknown-linux-darwin24.6.0.tar.xz. Pre-built artifacts might not be available for this target at this time, see https://doc.rust-lang.org/nightly/rustc/platform-support.html for more information.

[1] https://github.com/openwrt/packages/commit/105fa3920e12f557bdf1fcbc566fc286fb53e319

Signed-off-by: Georgi Valkov <gvalkov@gmail.com>
2026-06-09 14:28:34 +02:00
Seo Suchan 5504291b81 luajit2: update test-version.sh to actual test
old just disabled version test, but as LuaJIt 2.1. part is stable.
So we can use that for test if luajit2 itself able to run.

Fixes: c7ca6d46f7 luajit2: ("add test-version.sh")
Suggested-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

Signed-off-by: Seo Suchan <tjtncks@gmail.com>
2026-06-09 12:14:09 +02:00
Alexandru Ardelean 29c7547b2e python-psycopg2: bump to 2.9.12
Refresh sha256 from PyPI sdist.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-06-09 09:28:03 +03:00
Alexandru Ardelean a3cf55ac55 python-lxml: bump to 6.1.1
Refresh sha256 from PyPI sdist.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-06-09 09:28:03 +03:00
Alexandru Ardelean 1f97548589 python-cython: bump to 3.2.5
Refresh sha256 from PyPI sdist.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-06-09 09:28:03 +03:00
Alexandru Ardelean 5a31bfb4e4 python-awscli: fix stale assertion in test.sh
awscli 1.45.19 no longer exposes awscli.topics.TOPIC_TAGS, so the test
raised an AssertionError (silently, as the heredoc exit code was ignored).
Drop the brittle check and make the smoke test fail hard if the CLI driver
cannot be created.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-06-09 09:27:30 +03:00
Alexandru Ardelean cb99eecb43 python-rsa: add test-version.sh generic version-check override
The pyrsa-* command line tools use argparse and do not print the package
version with any of the flags probed by the CI generic version check, so it
reports "No executables in the package provided version" and fails. Add a
test-version.sh override; functionality remains covered by test.sh.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-06-09 09:27:30 +03:00
Alexandru Ardelean e7aff35e97 python-jmespath: install jp as a non-byte-compiled command
Upstream ships its jp command-line tool as a plain "jp.py" script. Under
that name OpenWrt byte-compiles it into a non-executable /usr/bin/jp.pyc
(and the -src package keeps a "#!/usr/bin/env python" jp.py, which has no
interpreter on OpenWrt), so it fails the CI generic executable check.

Install it as /usr/bin/jp instead: the missing .py extension stops it from
being byte-compiled and Python3/FixShebang rewrites the shebang to
/usr/bin/python3. Add a test-version.sh override since jp takes a required
expression argument and has no version flag for the generic check to probe.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-06-09 09:27:30 +03:00
Alexandru Ardelean ba593bc0f3 python-awscli: bump to 1.45.19
Refresh sha256 from PyPI sdist.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-06-09 09:27:30 +03:00
Alexandru Ardelean 40f29e0330 python-boto3: bump to 1.43.19
Refresh sha256 from PyPI sdist.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-06-09 09:27:30 +03:00
Alexandru Ardelean fbb9bea56a python-botocore: bump to 1.43.19
Refresh sha256 from PyPI sdist.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-06-09 09:27:30 +03:00
Alexandru Ardelean 4fdbc1a50f numpy: bump to 2.4.6
Refresh sha256 from PyPI sdist.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-06-09 09:27:12 +03:00
George Sapkin e38f41afe3 quickjs: add basic evaluation test
Add basic JS evaluation test and move version check to override.

Signed-off-by: George Sapkin <george@sapk.in>
2026-06-09 01:19:46 +03:00
George Sapkin 56f59039b5 quickjs: bump to 2026.06.04
Changes: https://bellard.org/quickjs/Changelog
Signed-off-by: George Sapkin <george@sapk.in>
2026-06-09 01:19:46 +03:00
Josef Schlehofer b6d2070fc8 perl: install libperl.so using $(INSTALL_BIN) to enable stripping
Install libperl.so with executable permissions (0755) instead of copying
it as-is.

This allows the OpenWrt build system to recognize the library as a binary and
automatically run the "strip" utility on it. Stripping removes unnecessary
debugging metadata and helper symbols that are only needed for development but
not for running Perl on the router.

This change reduces the installed size of libperl.so on the device:
- Before (not stripped): 3.7 MB (3,929,652 bytes)

```
root@turris:~# file /usr/lib/perl5/5.40/CORE/libperl.so
/usr/lib/perl5/5.40/CORE/libperl.so: ELF 32-bit MSB shared object, PowerPC or cisco 4500, version 1 (SYSV), dynamically linked, with debug_info, not stripped
```

- After (stripped):     3.5 MB (3,674,081 bytes)

```
root@turris:~# file /usr/lib/perl5/5.40/CORE/libperl.so
/usr/lib/perl5/5.40/CORE/libperl.so: ELF 32-bit MSB shared object, PowerPC or cisco 4500, version 1 (SYSV), dynamically linked, no section header
```

Saving ~255 KB of flash storage space on target devices.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2026-06-08 16:41:45 +02:00
Wei-Ting Yang 1adc058454 treewide: add or correct license information
Add or correct license information across multiple packages.

Signed-off-by: Wei-Ting Yang <williamatcg@gmail.com>
2026-06-08 16:29:56 +03:00
Josef Schlehofer ea541f48b5 python3: fix host python extension compilation on macOS
On macOS (Darwin) hosts, building host Python C extensions (such as Cython) using the '-shared' flag and linking against '-lpython3.x' causes the host Python interpreter to load a duplicate copy of the Python runtime. This leads to type checking mismatches and segmentation faults (SIGSEGV) when importing the compiled extension.

For example, running:
    ./staging_dir/hostpkg/bin/python3 -c "import Cython.Utils"
crashes with:
    Segmentation fault: 11

To build shared modules correctly on macOS, they must be compiled as bundles using the '-bundle -undefined dynamic_lookup' flags instead of '-shared', and they should not link against the Python library (no '-lpython3.x' in LDFLAGS).

Fix this by dynamically adjusting LDSHARED and LDFLAGS in python3-host.mk when the host OS is Darwin.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2026-06-08 14:34:58 +03:00
Josef Schlehofer d08ac509fa perl: fix version check in test-version.sh
Enable version checking for the main perl package.
Previously, the version check for perl was skipped. Add a check
that runs perl -v and verifies that the output matches PKG_VERSION.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2026-06-07 17:17:41 -06:00
Seo Suchan c7ca6d46f7 luajit2: add test-version.sh
luajit2 use build number at -v, but releases are named by date

Signed-off-by: Seo Suchan <tjtncks@gmail.com>
2026-06-07 20:21:09 +02:00
Alexandru Ardelean e938860f2f python-orjson: update to 3.11.9
3.11.8 failed to build against the SDK's stable rust 1.96.0: build.rs enabled
orjson's "cold_path" cargo feature for rustc >= 1.95.0, activating an unstable
feature gate that errors with E0554. 3.11.9 drops it; plain version bump.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-06-07 20:04:16 +03:00
Alexandru Ardelean 2d01e86e5f python-docutils: bump to 0.23
Refresh sha256 from PyPI sdist.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-06-07 13:49:34 +03:00
Alexandru Ardelean c6cc0b9a70 python-zope-interface: bump to 8.5
Refresh sha256 from PyPI sdist.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-06-07 13:49:34 +03:00
Alexandru Ardelean d8555970b1 python-wheel: bump to 0.47.0
Refresh sha256 from PyPI sdist.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-06-07 13:49:34 +03:00
Alexandru Ardelean a788a7bec0 python-trove-classifiers: bump to 2026.6.1.19
Refresh sha256 from PyPI sdist.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-06-05 07:37:51 +03:00
Alexandru Ardelean 08c73140d6 python-platformdirs: bump to 4.10.0
Refresh sha256 from PyPI sdist.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-06-05 07:37:51 +03:00
Alexandru Ardelean 08355d5a1d python-idna: bump to 3.17
Refresh sha256 from PyPI sdist.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-06-05 07:37:51 +03:00
Alexandru Ardelean 165872c1c2 pymysql: bump to 1.2.0
Refresh sha256 from PyPI sdist.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-06-05 07:37:42 +03:00
Alexandru Ardelean fb5cc23132 python-pip: bump to 26.1.2
Refresh sha256 from PyPI sdist.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-06-05 07:37:42 +03:00
Alexandru Ardelean e4bf8904fb python-pyopenssl: bump to 26.2.0
Refresh sha256 from PyPI sdist. pyOpenSSL 26.2.0 dropped EC support
from the legacy crypto.PKey API (the call surfaces as "OpenSSL.crypto.Error:
No such key type"); drop the EC-key arm of test.sh accordingly. Upstream
points at the cryptography package for EC key generation.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-06-05 07:37:42 +03:00
Alexandru Ardelean 0441b62667 python-build: bump to 1.5.0
Refresh sha256 from PyPI sdist.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-06-04 21:57:42 +03:00
Alexandru Ardelean c8d4f6763e python-poetry-core: bump to 2.4.1
Refresh sha256 from PyPI sdist.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-06-04 21:57:42 +03:00
Alexandru Ardelean a90c93c2c2 python-hatchling: bump to 1.30.1
Refresh sha256 from PyPI sdist.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-06-04 21:57:42 +03:00
Alexandru Ardelean 8bb7aad2d5 python-pika: bump to 1.4.1
Refresh sha256 from PyPI sdist.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-06-04 21:57:31 +03:00
Alexandru Ardelean be44374593 python-starlette: bump to 1.2.1
Refresh sha256 from PyPI sdist.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-06-04 21:57:31 +03:00
Alexandru Ardelean 19dcdad21b python-uvicorn: bump to 0.48.0
Refresh sha256 from PyPI sdist.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-06-04 21:57:31 +03:00
Wei-Ting Yang acb028dbf7 django: bump to version 6.0.6
Fix CVE-2026-6873, CVE-2026-7666, CVE-2026-8404, CVE-2026-35193, and
CVE-2026-48587.

Full release notes:
https://docs.djangoproject.com/en/6.0/releases/6.0.6/

Signed-off-by: Wei-Ting Yang <williamatcg@gmail.com>
2026-06-04 20:41:51 +03:00