1
0
mirror of https://git.openwrt.org/feed/packages.git synced 2024-06-26 09:37:44 +02:00
Commit Graph

3834 Commits

Author SHA1 Message Date
Nick Hainke
c8bed78fb3 python3-iperf3: add iperf3 python wrapper
This wrapper gives us an easy to use api for using iperf3 in python.

Signed-off-by: Nick Hainke <vincent@systemli.org>
2022-09-14 02:37:44 -07:00
Nick Hainke
b8bfdc5cd6 python3-flent: add flent package
As described on GitHub page [0]:
  Flent is a Python wrapper to run multiple simultaneous
  netperf/iperf/ping instances and aggregate the results.

[0] - https://github.com/tohojo/flent

Signed-off-by: Nick Hainke <vincent@systemli.org>
2022-09-14 02:36:07 -07:00
Šimon Bořek
992fcd1bd8 python3: backport and fix target musl libc detection
Patch 030:
Backported from Python main branch[^1] for Python to distinguish between glibc and musl libc SOABI.

Patch 131:
Changes PLATFORM_TRIPLET -gnu/-musl suffix detection (performed by the backported patch)
to be based on the target OS instead of the building OS.

See included patches for more detailed descriptions.

Specifically this fixes cross-compilation for mpc8548 CPUs with SPE instructions[^2] enabled.

[^1]: merged to python:main as https://github.com/python/cpython/pull/24502 'bpo-43112: detect musl as a separate SOABI'
[^2]: https://www.nxp.com/docs/en/reference-manual/SPEPEM.pdf

Co-authored-by: Pali Rohár <pali@kernel.org>
Signed-off-by: Šimon Bořek <simon.borek@nic.cz>
2022-09-12 14:20:14 -07:00
Javier Marcet
1c49d1a309 python-websocket-client: update to 1.4.1
- Fix stack growth bug when `run_forever` reconnects
  - Add doctest CI for sphinx docs code examples (d150099)
  - General docs improvements
  - Fix automatic reconnect with `run_forever`
  - Allow a timeout to be set when using a proxy

Signed-off-by: Javier Marcet <javier@marcet.info>
2022-09-09 15:18:12 -07:00
Javier Marcet
bb44de8634 python-dotenv: update to v0.21.0
Added:

 - CLI: add support for invocations via 'python -m'.
 - load_dotenv function now returns False.
 - CLI: add --format= option to list command.

Fixed:

 - Drop Python 3.5 and 3.6 and upgrade GA
 - Use open instead of io.open.
 - Improve documentation for variables without a value
 - Add parse_it to Related Projects
 - Update README.md
 - Improve documentation with direct use of MkDocs

Signed-off-by: Javier Marcet <javier@marcet.info>
2022-09-09 15:18:01 -07:00
Javier Marcet
7b3ceb95d9 python-docker: Update to 6.0.0
Signed-off-by: Javier Marcet <javier@marcet.info>
2022-09-09 15:17:54 -07:00
Michael Heimpold
026a672ad1 php8: update to 8.1.10
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2022-09-06 21:47:30 +02:00
Siger Yang
d9099da779 luaossl: update to rel-20220711
Signed-off-by: Siger Yang <siger.yang@outlook.com>
2022-08-31 13:33:28 -07:00
Alexandru Ardelean
552def0637
Merge pull request #19238 from dynasticorpheus/pycares
python-pycares: add new package
2022-08-28 20:59:42 +03:00
Josef Schlehofer
72cf350b08
Merge pull request #19253 from turris-cz/pyuci
python-uci: update to version 0.9.0
2022-08-26 16:55:12 +02:00
Josef Schlehofer
e340fe8a12
python-uci: update to version 0.9.0
- Release notes:
https://gitlab.nic.cz/turris/pyuci/-/tags/v0.9.0
- Update copyright while at it.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-08-25 16:46:29 +02:00
Fabian Lipken
90ef79afd8 python-pycares: add new package
Signed-off-by: Fabian Lipken <dynasticorpheus@gmail.com>
2022-08-25 11:53:02 +02:00
Eneas U de Queiroz
f3a3184d32 lua-eco: rework SSL library dependency & selection
Currently, lua-eco will add dependencies to all SSL libraries that are
selected, even though it will only use one of them.  That means that the
package downloaded from the regular repository will install OpenSSL,
wolfSSL and mbedTLS, even though it will only use OpenSSL.

Fix that by adding a built option so that the default can be changed at
build-time.  To maintain the author's intention, a default symbol is
computed based on what libraries are being built into the image, or just
selected as a module.  Originally, the order or preference was OpenSSL,
wolfSSL, then mbedTLS.

One change was made to the original order: if OpenSSL and wolfSSL are
both selected as module, and mbedTLS is not built into the image,
wolfSSL will be preferred over OpenSSL.  This is being done to keep the
package consistent with OpenWRT's selection of wolfSSL as the default
SSL library.  If they are both included in the image, then OpenSSL will
be preferred.

The order of preference is:
1. If at least one library is included in the image, use the first of
   OpenSSL, wolfSSL, and mbedTLS that is included in the image.
2. If at least one library is selected, but none included in the image,
   prefer wolfSSL, then OpenSSL, then mbedTLS.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
2022-08-24 13:23:35 -07:00
Alexandru Ardelean
c6ac0c497f
Merge pull request #19229 from commodo/python-updates1
django, python-{evdev,pytz}: bump versions
2022-08-24 12:29:43 +03:00
Tianling Shen
d04fefc2b7 perl-ack: Update to 3.6.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2022-08-23 16:37:16 -07:00
Hirokazu MORIKAWA
841b38f37a node: bump to v16.17.0
Notable Changes:
Experimental command-line argument parser API
Experimental ESM Loader Hooks API
Experimental test runner
Improved interoperability of the Web Crypto API

Dependency updates:
Updated Corepack to 0.12.1
Updated ICU to 71.1
Updated npm to 8.15.0
Updated Undici to 5.8.0

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2022-08-23 08:24:51 +02:00
Alexandru Ardelean
e706b0691b python-pytz: bump to version 2022.2.1
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-08-22 16:20:01 +03:00
Alexandru Ardelean
cbe023d285 django: bump to 4.1
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-08-22 10:00:47 +03:00
Alexandru Ardelean
f5f282f0bb python-evdev: bump to 1.6.0
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-08-22 09:12:13 +03:00
Alexandru Ardelean
8bf399f78e
Merge pull request #19192 from turris-cz/cython-pip-requirements
host-pip-requirements: update Cython to version 0.29.28
2022-08-19 20:45:10 +03:00
Josef Schlehofer
e78352c043
host-pip-requirements: update Cython to version 0.29.28
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-08-17 16:07:16 +02:00
Alexandru Ardelean
222a8683c0 python3-simplejson: drop package
Was only used by Bigclown.
The project (Bigclown) has accepted the switch from simplejson to it's
built-in json lib, and we can now drop this lib.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-08-16 13:12:33 -07:00
Josef Schlehofer
ce1679a07f
python-websockets: update to version 10.3
- Update copyright

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-08-12 21:35:39 +02:00
Michael Heimpold
55e06d66fa php8: update to 8.1.9
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2022-08-08 00:58:45 +02:00
Šimon Bořek
a4a484fbca luajit: patch: PPC/e500 SPE: use soft float instead of failing
makes LuaJit builds for mpc85xx targets with SPE ISA extension
enabled possible

Quoting inner commit message:

This allows building LuaJit for systems with Power ISA SPE
extension[^1] support by using soft float on LuaJit side.

While e500 CPU cores support SPE instruction set extension
allowing them to perform floating point arithmetic natively,
this isn't required. They can function with software floating
point to integer arithmetic translation as well,
just like FPU-less PowerPC CPUs without SPE support.

Therefore I see no need to prevent them from running LuaJit
explicitly.

[^1]: https://www.nxp.com/docs/en/reference-manual/SPEPEM.pdf

Signed-off-by: Pali Rohár <pali@kernel.org>
Signed-off-by: Šimon Bořek <simon.borek@nic.cz>
2022-08-06 10:34:58 -07:00
Jan Hoffmann
52ae0a2018 python-paho-mqtt: add missing dependency
The uuid module has been split out into a separate package with the
update to Python 3.10.

Signed-off-by: Jan Hoffmann <jan@3e8.eu>
2022-08-03 17:04:42 +02:00
Javier Marcet
500cdd1243 python-jsonschema: Update to 4.9.0
Signed-off-by: Javier Marcet <javier@marcet.info>
2022-08-02 18:07:56 -07:00
Michael Heimpold
d413cdf17a
Merge pull request #18993 from mhei/php8-update-8.1.8
php8: update to 8.1.8
2022-07-28 10:31:41 +02:00
ZiMing Mo
fd1e3e2890 ruby: fix build with LibreSSL over v3.5
LibreSSL 3.5 and later provide and need to use
PEM_write_bio_PrivateKey_traditional()

upstream commit:
e25fb0d0d8
b02815271f

Signed-off-by: ZiMing Mo <msylgj@immortalwrt.org>
2022-07-23 19:19:12 -07:00
Sebastian Kemper
6544b67f1f erlang: workaround LibreSSL-3.5.0 compat issues
Cherry-pick four upstream commits that prevent building of
otp_test_engine when LibreSSL-3.5.0 is used.

Since OpenWrt bumped LibreSSL to 3.5.3 the erlang host builds fail to
complete.

 CC	../priv/obj/x86_64-pc-linux-gnu/otp_test_engine.o
otp_test_engine.c: In function 'test_engine_md5_init':
otp_test_engine.c:144:34: error: dereferencing pointer to incomplete type 'EVP_MD_CTX' {aka 'struct env_md_ctx_st'}
 #define data(ctx) ((MD5_CTX *)ctx->md_data)
                                  ^~

Also switch to AUTORELEASE.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2022-07-23 12:45:10 -07:00
Andre Heider
bd6e205421 python3: update patches for libressl v3.5
Based upon patches from OpenBSD[0] and Gentoo[1].

Switched to the LibreSSL provided LIBRESSL_VERSION_NUMBER macro, which
makes OPENWRT_HOST_BUILD redundant.

[0] https://github.com/openbsd/ports/tree/master/lang/python/3.10/patches
[1] https://github.com/gentoo/libressl/tree/master/dev-lang/python/files

Signed-off-by: Andre Heider <a.heider@gmail.com>
2022-07-23 12:28:55 -07:00
Alexandru Ardelean
0ae4a5195a
Merge pull request #18966 from commodo/django-bump
django: bump to version 4.0.6
2022-07-22 14:44:43 +03:00
Michael Heimpold
78f45bb651 php8: update to 8.1.8
This fixes:
    - CVE-2022-31627

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2022-07-20 21:47:20 +02:00
Michael Heimpold
61b31a3157
Merge pull request #18919 from mhei/php8-full-libiconv
php8: fixup libiconv usage (refs openwrt/openwrt#10024)
2022-07-19 19:20:11 +02:00
Alexandru Ardelean
b0ddec3161 django: bump to version 4.0.6
Fixes https://nvd.nist.gov/vuln/detail/CVE-2022-34265

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-07-18 17:46:36 +03:00
Jeffery To
60168651a2
golang: Update to 1.18.4
Includes fixes for:

* CVE-2022-1705: net/http: improper sanitization of Transfer-Encoding
  header
* CVE-2022-1962: go/parser: stack exhaustion in all Parse* functions
* CVE-2022-28131: encoding/xml: stack exhaustion in Decoder.Skip
* CVE-2022-30630: io/fs: stack exhaustion in Glob
* CVE-2022-30631: compress/gzip: stack exhaustion in Reader.Read
* CVE-2022-30632: path/filepath: stack exhaustion in Glob
* CVE-2022-30633: encoding/xml: stack exhaustion in Unmarshal
* CVE-2022-30635: encoding/gob: stack exhaustion in Decoder.Decode
* CVE-2022-32148: net/http/httputil: NewSingleHostReverseProxy - omit
  X-Forwarded-For not working

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-07-18 17:35:11 +08:00
Michael Heimpold
a24a76783e php8: fixup libiconv usage (refs openwrt/openwrt#10024)
Since the OpenWrt's stub libiconv implementation is now gone,
we can build against musl's internal one or the external libiconv
implementation.
This needs minor adjustements in the makefile to allow PHPs build
to choose the right path when cross-compiling.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2022-07-17 14:11:39 +02:00
Hirokazu MORIKAWA
8db0d09823 node: July 7th 2022 Security Releases
Update to v16.16.0

Release for the following issues:
HTTP Request Smuggling - Flawed Parsing of Transfer-Encoding (Medium)(CVE-2022-32213)
HTTP Request Smuggling - Improper Delimiting of Header Fields (Medium)(CVE-2022-32214)
HTTP Request Smuggling - Incorrect Parsing of Multi-line Transfer-Encoding (Medium)(CVE-2022-32215)
DNS rebinding in --inspect via invalid IP addresses (High)(CVE-2022-32212)

https://nodejs.org/en/blog/vulnerability/july-2022-security-releases/

No vulnerabilities related with openssl (uses system openssl)

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2022-07-10 22:38:20 +02:00
Alexandru Ardelean
884ac1e35b python-requests: bump to version 2.28.1
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-07-07 10:35:14 -07:00
Alexandru Ardelean
44e880df4b python-lxml: bump to version 4.9.1
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-07-07 10:35:14 -07:00
Alexandru Ardelean
ed8420cd97 pillow: bump to version 9.2.0
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-07-07 10:35:14 -07:00
Alexandru Ardelean
efd57e201d python-chardet: bump to version 5.0.0
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-07-07 10:35:14 -07:00
Jeffery To
9e3b7d7883
python-cryptography: Fix failing build
Fixes https://github.com/openwrt/packages/issues/18876.
Fixes https://github.com/openwrt/packages/issues/18879.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-07-07 17:35:41 +08:00
Javier Marcet
83de96fbb3 python-jsonschema: Update to 4.6.1
What's Changed:

 - Type annotate format checker methods by @sirosen
 - Fix fuzzer to include instrumentation by @DavidKorczynski
 - [pre-commit.ci] pre-commit autoupdate by @pre-commit-ci

Signed-off-by: Javier Marcet <javier@marcet.info>
2022-07-01 14:42:19 +02:00
Michael Heimpold
8ec712ff61
Merge pull request #18823 from mhei/php8-update
php8: update to 8.1.7
2022-06-26 21:49:47 +02:00
Javier Marcet
766cfa19cf python-websocket-client: update to 1.3.3
- Fix unclosed socket error
 - Update header dict access
 - Add utf8 workaround to docs

Signed-off-by: Javier Marcet <javier@marcet.info>
2022-06-25 10:42:22 -07:00
Rosen Penev
24c0007ea2 luajit: backport softfloat ppc support
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-06-22 12:48:32 -06:00
Michael Heimpold
f8f72420cd php8: update to 8.1.7
This fixes:
    - CVE-2022-31625
    - CVE-2022-31626

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2022-06-21 23:48:13 +02:00
Andy Walsh
cd49a8fb27 samba4: drop maintainership
drop maintainership:
* samba4
* ksmbd-tools
* perl-parse-yapp
* libtirpc
* softethervpn5
* wsdd2
* rpcsvc-proto

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2022-06-21 12:24:15 -06:00
Alexandru Ardelean
b9a47cc470 django: bump to version 4.0.5
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-06-19 09:03:03 +02:00
Alexandru Ardelean
7fddb0b6fb lxml: bump to version 4.9.0
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-06-19 09:03:03 +02:00
Jeffery To
57e2b656cb
python3: Update to 3.10.5, refresh patches
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-06-13 18:21:20 +08:00
Hirokazu MORIKAWA
d8dc54ceea node: bump to v16.15.1
Upgrade npm to 8.11.0
Suppressed unnecessary builds.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2022-06-09 21:07:59 -07:00
Javier Marcet
f7a00eb6ab python-jsonschema: Update to 4.6.0
What's Changed:

 - Add package_url for changelog by @fhightower
 - Only validate unevaluated properties/items on applicable types by
 @EpicWink
 - Mark library as typed (PEP-561) by @ssbarnea
 - Add v4.5.1 to changelog by @sirosen
 - Modernize the packaging setup via PEP 621 and Hatch. by @Julian

New Contributors:

 - @fhightower made their first contribution
 - @EpicWink made their first contribution

Signed-off-by: Javier Marcet <javier@marcet.info>
2022-06-09 11:01:25 -07:00
Jeffery To
faa546ac0a micropython-lib: Update to latest master
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-06-06 15:09:51 -07:00
Jeffery To
112cf09031 golang: Update to 1.18.3
Includes fix for CVE-2022-30634 (crypto/rand: Read hangs when passed
buffer larger than 1<<32 - 1).

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-06-06 15:08:39 -07:00
Alexandru Ardelean
5e1546c4c9 openpyxl: bump to version 3.0.10
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-06-03 21:30:45 -07:00
Alexandru Ardelean
e65d982541 pillow: bump to version 9.1.1
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-06-03 21:30:45 -07:00
Hirokazu MORIKAWA
fcfd2599d9 node: bump to v16.15.0
Description:
Update from  v16.15.0
Changed handling of host's npm problems due to npm updates.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2022-05-31 23:14:52 -07:00
Jeffery To
d71f082cdc
Merge pull request #18584 from mpratt14/golang-bootstrap-arch
golang: some makefile fixes
2022-05-31 14:59:04 +08:00
Michael Heimpold
fbcb35b33f php8: update to 8.1.6
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2022-05-29 11:05:11 +02:00
Michael Pratt
bb7c596028 golang: do not rely on Go script host detection
for some use cases, for example:
a system with 64 bit kernel
and 32 bit userspace programs

the local Go installation is "detected"
using the kernel "uname",
causing build failure if they happen to differ

by adding the argument GOHOSTARCH using the corresponding make variable
it would be fully controlled in the openwrt git tree
based on the HOST_ARCH make variable.

Signed-off-by: Michael Pratt <mcpratt@pm.me>
2022-05-27 02:39:52 -04:00
Michael Pratt
b99164aff4 golang: enable verbose output
allow the building script of Go to output verbose
when make is executed with "V=s..."

Signed-off-by: Michael Pratt <mcpratt@pm.me>
2022-05-27 02:39:52 -04:00
Michael Pratt
abf28899a0 golang: split compile recipe into configure and compile
the default Configure recipe for packages
assumes that there is a "configure" script
in the source tree directory

Go does not have such a script,
configure and compile is done with the same script

so split the current Compile recipe
into both Configure and Compile recipes

Signed-off-by: Michael Pratt <mcpratt@pm.me>
2022-05-27 02:39:52 -04:00
Maciej Krüger
0b5eb86718 lua-openssl: update to version 0.8.2-1
Signed-off-by: Maciej Krüger <mkg20001@gmail.com>
2022-05-26 20:39:30 -07:00
Javier Marcet
f1ed3f5bc2 python-jsonschema: Update to 4.5.1
What's Changed:

 - Extend dynamicRef keyword by @nezhar
 - Add FORMAT_CHECKER attribute for Validator by @TiborVoelcker
 - Remove stray double-quote by @lurch
 - Ensure proper sorting of list in error message by @ssbarnea

Signed-off-by: Javier Marcet <javier@marcet.info>
2022-05-25 17:04:47 -07:00
Javier Marcet
117e3d6a18 python3-paramiko: update to version 2.11.0
2.11.0:

 - [Feature] Add SSH config token expansion (eg %h, %p) when parsing
 ProxyJump directives. Patch courtesy of Bruno Inec.

 - [Support] (via #2011) Apply unittest skipIf to tests currently
 using SHA1 in their critical path, to avoid failures on systems
 starting to disable SHA1 outright in their crypto backends (eg RHEL
 9). Report & patch via Paul Howarth.

 - [Support] Update camelCase method calls against the threading
 module to be snake_case; this and related tweaks should fix some
 deprecation warnings under Python 3.10. Thanks to Karthikeyan
 Singaravelan for the report, @Narendra-Neerukonda for the patch,
 and to Thomas Grainger and Jun Omae for patch workshopping.

 - [Support] Recent versions of Cryptography have deprecated Blowfish
 algorithm support; in lieu of an easy method for users to remove it
 from the list of algorithms Paramiko tries to import and use, we’ve
 decided to remove it from our “preferred algorithms” list. This will
 both discourage use of a weak algorithm, and avoid warnings. Credit
 for report/patch goes to Mike Roest.

2.10.5:

 - [Bug] Windows-native SSH agent support as merged in 2.10 could
 encounter Errno 22 OSError exceptions in some scenarios (eg server
 not cleanly closing a relevant named pipe). This has been worked
 around and should be less problematic. Reported by Danilo Campana
 Fuchs and patched by Jun Omae.

 - [Bug] OpenSSH 7.7 and older has a bug preventing it from
 understanding how to perform SHA2 signature verification for RSA
 certificates (specifically certs - not keys), so when we added SHA2
 support it broke all clients using RSA certificates with these
 servers. This has been fixed in a manner similar to what OpenSSH’s
 own client does: a version check is performed and the algorithm used
 is downgraded if needed. Reported by Adarsh Chauhan, with fix
 suggested by Jun Omae.

 - [Bug] Align signature verification algorithm with OpenSSH re:
 zero-padding signatures which don’t match their nominal size/length.
 This shouldn’t affect most users, but will help Paramiko-implemented
 SSH servers handle poorly behaved clients such as PuTTY. Thanks to
 Jun Omae for catch & patch.

Signed-off-by: Javier Marcet <javier@marcet.info>
2022-05-25 17:03:28 -07:00
Jianhui Zhao
3d2c8121e2 lua-eco: Add package
Lua-eco is a `Lua coroutine` library which was implemented based on `IO event`.

Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>
2022-05-15 05:49:13 -07:00
Jeffery To
659f87d5d4 golang: Update to 1.18.2
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-05-14 21:28:14 -07:00
Jeffery To
8550edbe85 micropython-lib: Update to latest master
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-05-14 21:27:21 -07:00
W. Michael Petullo
0320174ff2 python3-networkx: update to 2.8
Signed-off-by: W. Michael Petullo <mike@flyn.org>
2022-05-11 17:50:42 -04:00
W. Michael Petullo
b1d67bd944 luasocket: update to 3.0.0
Signed-off-by: W. Michael Petullo <mike@flyn.org>
2022-05-11 17:49:59 -04:00
W. Michael Petullo
3bac465051 luaexpat: update to 1.4.1
Signed-off-by: W. Michael Petullo <mike@flyn.org>
2022-05-11 17:47:58 -04:00
Javier Marcet
b1159e8764 python3-paramiko: update to version 2.10.4
- [Bug] Servers offering certificate variants of hostkey algorithms
 (eg ssh-rsa-cert-v01@openssh.com) could not have their host keys
 verified by Paramiko clients, as it only ever considered non-cert key
 types for that part of connection handshaking. This has been fixed.

 - [Bug] PKey instances’ __eq__ did not have the usual safety guard in
 place to ensure they were being compared to another PKey object,
 causing occasional spurious BadHostKeyException (among other things).
 This has been fixed. Thanks to Shengdun Hua for the original report
 /patch and to Christopher Papke for the final version of the fix.

 - [Support] Update camelCase method calls against the threading
 module to be snake_case; this and related tweaks should fix some
 deprecation warnings under Python 3.10. Thanks to Karthikeyan
 Singaravelan for the report, @Narendra-Neerukonda for the patch, and
 to Thomas Grainger and Jun Omae for patch workshopping.

Signed-off-by: Javier Marcet <javier@marcet.info>
2022-05-02 12:48:21 -07:00
Josef Schlehofer
e670506a16
Merge pull request #18403 from turris-cz/change-Flask-Jinja2-maintainer
Flask, Jinja2: change maintainer
2022-04-28 13:03:01 +02:00
Alexandru Ardelean
66bf8fb484 django: bump to version 4.0.4
Fixes
https://nvd.nist.gov/vuln/detail/CVE-2022-28347
https://nvd.nist.gov/vuln/detail/CVE-2022-28346

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-04-28 08:32:24 +02:00
Šimon Bořek
b4fa391fe6
Jinja2: change maintainer to Šimon Bořek
As we are using this package in Turris OS
and Daniel Golle decided to no longer maintain this
and some other Python packages I'd like to take
this package maintainership as was originally
suggested in https://github.com/openwrt/packages/pull/17911
by Josef Schlehofer (@BKPepe).

Signed-off-by: Šimon Bořek <simon.borek@nic.cz>
2022-04-27 18:56:48 +02:00
Šimon Bořek
55bfe37ee8
Flask: change maintainer to Šimon Bořek
As we are using this package in Turris OS
and Daniel Golle decided to no longer maintain this
and some other Python packages I'd like to take
this package maintainership as was originally
suggested in https://github.com/openwrt/packages/pull/17911
by Josef Schlehofer (@BKPepe).

Signed-off-by: Šimon Bořek <simon.borek@nic.cz>
2022-04-27 18:42:21 +02:00
Michael Heimpold
ef1249f354 php8: update to 8.1.5
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2022-04-26 21:14:22 +02:00
Luiz Angelo Daros de Luca
16ae59c1b3 ruby: update to 3.1.2
Ruby 3.1.0 major changes:
- YJIT: New experimental in-process JIT compiler
- debug gem: A new debugger
- error_highlight: Fine-grained error location in backtrace
- IRB Autocomplete and Documentation Display
- Many more. See:
  https://www.ruby-lang.org/en/news/2021/12/25/ruby-3-1-0-released/

Ruby 3.1.1 changes:
- Many non-security bug fixes. See:
  https://www.ruby-lang.org/en/news/2022/02/18/ruby-3-1-1-released/

Ruby 3.1.2 changes:
- CVE-2022-28738: Double free in Regexp compilation
- CVE-2022-28739: Buffer overrun in String-to-Float conversion

Packaging changes:
- Dropped 100-musl.patch (upstream fix)
- Added: ruby-error_highlight, ruby-random_formatter,
  ruby-ruby2_keywords
- Removed: ruby-dbm, ruby-gdbm, ruby-fiber, ruby-gdbm, ruby-tracer
- ruby_find_pkgsdeps script:
  * cleaned some ignored and weak dependencies
- ruby_missingfiles script:
  * fix the example cmdline
  * let diff use all terminal columns

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2022-04-25 12:13:08 -07:00
Alexandru Ardelean
2c2a8990bb pillow: bump to version 9.1.0
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-04-19 07:38:45 +02:00
Jeffery To
43a380f953
python-twisted: Update to 22.4.0, refresh patches
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-04-18 19:12:27 +08:00
Hirokazu MORIKAWA
7636ffe654 node-serialport-bindings: Support for npm@8
With the upgrade of node.js to version 16, the npm version will also change to version 8.
This fix is to support npm@8. npm@6 can also build without problems.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2022-04-16 11:03:08 -07:00
Hirokazu MORIKAWA
46ad7621a4 node-arduino-firmata: Support for npm@8
With the upgrade of node.js to version 16, the npm version will also change to version 8.
This fix is to support npm@8. npm@6 can also build without problems.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2022-04-16 11:02:44 -07:00
Hirokazu MORIKAWA
de06db77ed node-cylon: Support for npm@8
With the upgrade of node.js to version 16, the npm version will also change to version 8.
This fix is to support npm@8. npm@6 can also build without problems.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2022-04-16 11:02:14 -07:00
Hirokazu MORIKAWA
9dc5f7e328 node-serialport: Support for npm@8
With the upgrade of node.js to version 16, the npm version will also change to version 8.
This fix is to support npm@8. npm@6 can also build without problems.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2022-04-16 11:01:53 -07:00
Hirokazu MORIKAWA
d2109d23f8 node-javascript-obfuscator: Support for npm@8
With the upgrade of node.js to version 16, the npm version will also change to version 8.
This fix is to support npm@8. npm@6 can also build without problems.

The modification method is different from other node modules.
The reason is due to the npm@8 issue.
https://github.com/npm/cli/issues/4027

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2022-04-16 11:01:38 -07:00
Hirokazu MORIKAWA
3e3b44b868 node-hid: Support for npm@8
With the upgrade of node.js to version 16, the npm version will also change to version 8.
This fix is to support npm@8. npm@6 can also build without problems.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2022-04-16 11:01:24 -07:00
Hirokazu MORIKAWA
5c5fa73db1 node-yarn: Support for npm@8
With the upgrade of node.js to version 16, the npm version will also change to version 8.
This fix is to support npm@8. npm@6 can also build without problems.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2022-04-16 11:01:06 -07:00
Hirokazu MORIKAWA
ef87dfec72 node-homebridge: Support for npm@8
With the upgrade of node.js to version 16, the npm version will also change to version 8.
This fix is to support npm@8. npm@6 can also build without problems.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2022-04-16 11:00:54 -07:00
Hirokazu MORIKAWA
5beac54277 node: Major update from v14 to v16
This update also changes npm from v6 to v8.
This change also requires node module packages to be modified.
Each package will be updated later.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2022-04-16 11:00:20 -07:00
Jeffery To
86fd1ebbe4 golang: Fix conditionals not stripped
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-04-15 15:18:12 -07:00
Jeffery To
8c0477a895 golang: Update to 1.18.1
Includes fixes for:
* CVE-2022-24675 - encoding/pem: stack overflow
* CVE-2022-28327 - crypto/elliptic: generic P-256 panic when scalar has
  too many leading zeroes

This also adds -buildvcs=false to omit VCS information in Go programs.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-04-15 15:18:12 -07:00
Alexandru Ardelean
1f0244f0c5 django: bump to version 4.0.3
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-04-07 15:32:34 -07:00
Javier Marcet
a39470c44d python-websocket-client: update to 1.3.2
- Add support for pre-initialized stream socket in new WebSocketApp
 - Remove rel.saferead() in examples (f0bf03d)
 - Increase scope of linting checks (dca4022)
 - Start adding type hints (a8a4099)

Signed-off-by: Javier Marcet <javier@marcet.info>
2022-04-05 11:10:58 +02:00
Michael Heimpold
8988b0a32f
Merge pull request #18143 from mhei/php8-pecl-redis-update
php8-pecl-redis: update to 5.3.7
2022-04-03 20:58:37 +02:00
Michael Heimpold
16a7a82e6c php8-pecl-redis: update to 5.3.7
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2022-04-03 11:17:15 +02:00
Michael Heimpold
5877d902e9 php8-pecl-imagick: update to 3.7.0
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2022-04-03 11:16:52 +02:00
Javier Marcet
b82d68e599 python-dotenv: update to v0.20.0
Added:

 - Add encoding (Optional[str]) parameter to get_key, set_key and
 unset_key. (by @bbc2)

Fixed:

 - Use dict to specify the entry_points parameter of setuptools.setup
 (by @mgorny).
 - Don't build universal wheels (by @bbc2).

Signed-off-by: Javier Marcet <javier@marcet.info>
2022-03-31 06:01:58 -07:00
Alexandru Ardelean
306af23e08 python-evdev: bump to version 1.5.0
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-03-30 19:43:38 -07:00