1
0
mirror of https://git.openwrt.org/feed/packages.git synced 2024-06-15 03:43:53 +02:00
Commit Graph

3434 Commits

Author SHA1 Message Date
Rosen Penev
073443c5c4
Merge pull request #16308 from jefferyto/golang-1.16.7
golang: Update to 1.16.7
2021-08-09 13:59:14 -07:00
Jeffery To
4d7a71a7cb
golang: Update to 1.16.7
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2021-08-09 17:51:43 +08:00
Jeffery To
4fa4cd8322
python-twisted: Update to 21.7.0, refresh patches
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2021-08-09 17:27:04 +08:00
Javier Marcet
0d4744f214 python3-distro: update to version 1.6.0
- BACKWARDS COMPATIBILITY:

  - Deprecated the distro.linux_distribution() function. Use
  distro.id(), distro.version() and distro.name() instead [#296]
  - Deprecated Python 2.7, 3.4 and 3.5 support. Further releases will
  only support Python 3.6+

- ENHANCEMENTS:

  - Added type hints to distro module [#269]
  - Added __version__ for checking distro version [#292]
  - Added support for arbitrary rootfs via the root_dir parameter
  [#247]
  - Added the --root-dir option to CLI [#161]
  - Added fallback to /usr/lib/os-release when /etc/os-release isn't
  available [#262]

- BUG FIXES:

  - Fixed subprocess.CalledProcessError when running lsb_release
  [#261]
  - Ignore /etc/iredmail-release file while parsing distribution
  [#268]
  - Use a binary file for /dev/null to avoid TextIOWrapper overhead
  [#271]

- RELEASE:

 - Moved repository from nir0s/distro to python-distro/distro on
 GitHub.

Signed-off-by: Javier Marcet <javier@marcet.info>
2021-08-03 16:17:35 +02:00
Tianling Shen
b783386890 pyodbc: update hash
This package was updated without a hash change.

Fixes: c157522580 ("pyodbc: update to version 4.0.31")

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-08-01 17:58:59 +01:00
Daniel Golle
2abbf288ed
Flash: update to version 2.0.1
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-08-01 04:15:46 +01:00
Daniel Golle
7b5b9b9d11
Jinja2: update to version 3.0.1
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-08-01 04:15:41 +01:00
Daniel Golle
65c12b3c2f
Werkzeug: update to version 2.0.1
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-08-01 04:15:36 +01:00
Daniel Golle
c30b804842
MarkupSafe: update to version 2.0.1
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-08-01 04:15:31 +01:00
Daniel Golle
01620b9cfb
click: update to version 8.0.1
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-08-01 04:15:27 +01:00
Daniel Golle
6ab3b605cf
itsdangerous: update to version 2.0.1
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-08-01 04:15:22 +01:00
Daniel Golle
c157522580
pyodbc: update to version 4.0.31
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-08-01 04:15:17 +01:00
Daniel Golle
05dcea0289
perl-net-dns: update to version 1.32
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-08-01 04:14:35 +01:00
Rosen Penev
50992fa3be
Merge pull request #16262 from nxhack/node_14174
node: bump to 14.17.4
2021-07-31 18:01:50 -07:00
Michael Heimpold
98d5e26d4d
Merge pull request #16248 from mhei/php7-update
php7: update to 7.4.22
2021-07-31 09:11:29 +02:00
Hirokazu MORIKAWA
cee32c84af node: bump to 14.17.4
July 2021 Security Releases:

Use after free on close http2 on stream canceling (High) (CVE-2021-22930)
Node.js is vulnerable to a use after free attack where an attacker might be able to exploit the memory corruption, to change process behavior.
You can read more about it in https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22930

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2021-07-31 11:28:02 +09:00
Michael Heimpold
741d6d6768 php7: update to 7.4.22
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2021-07-29 22:27:37 +02:00
Michael Heimpold
2dad652446 php8: add CI runtime test
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2021-07-29 22:20:45 +02:00
Michael Heimpold
9080dce60f php8: update to 8.0.9
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2021-07-29 21:46:37 +02:00
Rosen Penev
5ad6bb0a01
Merge pull request #16078 from ja-pa/fix-email
treewide: change email address in PKG_MAINTAINER
2021-07-29 12:37:06 -07:00
Rosen Penev
a62ef72402
Merge pull request #16106 from rpoisel/dev-add-lua-curl-v3
Lua-cURLv3: add package
2021-07-29 12:35:20 -07:00
Alexandru Ardelean
91f3482f7e numpy: fix circular dependency
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2021-07-29 15:33:34 +03:00
Jan Pavlinec
3ee2a087a3
treewide: change email
Change from jan.pavlinec@nic.cz to jan.pavlinec1@gmail.com

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2021-07-29 13:21:02 +02:00
Alexandru Ardelean
cb2300d354 numpy: bump to version 1.21.1
Also bump Cython version to 0.29.23.
And add support for OpenBLAS.
Currently optional, but will be enabled by default on some architectures
later.

Depends on PR https://github.com/openwrt/packages/pull/15685

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2021-07-26 12:05:57 +03:00
Alexandru Ardelean
6379f2a103 python-requests: bump to version 2.26.0
This version prefers charset_normalizer instead of chardet.
chardet is still usable if available.

Dropping patches for idna. Not required anymore.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2021-07-23 22:59:57 +02:00
Alexandru Ardelean
be2753a9a1 python-dateutil: bump to version 2.8.2
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2021-07-23 22:59:57 +02:00
Rosen Penev
cf537cd2cb
Merge pull request #16098 from neheb/erla
erlang: disable PIE
2021-07-19 04:01:02 -07:00
Rosen Penev
8be23b252d
Merge pull request #15798 from siger-yeung/master
luaossl: add luaossl(rel-20200709) to feeds
2021-07-19 03:54:39 -07:00
Jeffery To
c0c62227bd
golang: Update to 1.16.6
Includes fix for CVE-2021-34558 (crypto/tls: clients can panic when
provided a certificate of the wrong type for the negotiated parameters).

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2021-07-19 06:44:52 +08:00
Rainer Poisel
28451eecef Lua-cURLv3: add package
Signed-off-by: Rainer Poisel <rainer.poisel@gmail.com>
2021-07-16 19:03:02 +02:00
Rosen Penev
9eb200f0d5
Merge pull request #16118 from commodo/python-updates1
python-{simplejson,cffi,pillow}: update versions
2021-07-15 11:46:40 -07:00
Rosen Penev
9ffdf3bc54
Merge pull request #16134 from luizluca/ruby-3.0.2
ruby: update to 3.0.2
2021-07-15 11:43:18 -07:00
Luiz Angelo Daros de Luca
1b41e8f641 ruby: update to 3.0.2
This release fixes some bugs and these vulnerabilities:

* CVE-2021-31810: Trusting FTP PASV responses vulnerability in Net::FTP
* CVE-2021-32066: A StartTLS stripping vulnerability in Net::IMAP
* CVE-2021-31799: A command injection vulnerability in RDoc

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2021-07-15 14:44:15 -03:00
Alexandru Ardelean
f70ad0e816 pillow: bump to version 8.3.1
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2021-07-14 11:20:08 +03:00
Alexandru Ardelean
e08b94b753 python-cffi: bump to version 1.14.6
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2021-07-14 11:20:07 +03:00
Alexandru Ardelean
69c86c3a19 python-simplejson: bump to version 3.17.3
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2021-07-14 11:18:50 +03:00
Alexandru Ardelean
78f6c2c5ad python3: use gdbm for Berkley dbm
Python works with GNU DBM and with Berkley DBM.
Berkley DBM has been under Oracle for some time.

And it's not clear how many Python users actually use DBM.

In the packages feed, we have both libdb47 (which is now under Oracle) and
GNU DBM. The GNU DBM has a compatibility layer for Berkley DBM.
There are newer versions than libdb47, but it's probably not worth having
them yet. The libbd47 tarball is ~40+ MB. Odds are newer versions will be
bigger and more bloated.

This change merges the old `python3-gdbm` package into the `python3-dbm`
package, since they are effectively using the same underlying library now,
i.e. gdbm.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2021-07-13 11:22:51 +03:00
Rosen Penev
5685d92268 erlang: disable PIE
Fails to compile with it on.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-07-11 02:03:44 -07:00
Alexandru Ardelean
d27d23167b python3: do a simple ls on pip & setuptools if not selected for build
I seem to forget to check/select setuptools and pip (that come bundled with
Python).
This change will do a simple 'ls' on the 2 wheel files, so that the build
fails even if just building Python.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2021-07-06 16:20:18 +02:00
Alexandru Ardelean
8b3297e507 python3: update to version 3.9.6
Refreshed patches.
Bumped pip to 21.1.3.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2021-07-06 16:20:18 +02:00
Michael Heimpold
42aa15b653
Merge pull request #16038 from mhei/php7-update
php7: update to 7.4.21
2021-07-05 20:58:41 +02:00
Michael Heimpold
7984c71bdd
Merge pull request #16037 from mhei/php8-update
php8: update to 8.0.8
2021-07-05 20:58:30 +02:00
Rosen Penev
6dee6ce5a6
Merge pull request #16043 from commodo/pillow
pillow: bump to version 8.3.0
2021-07-05 02:55:21 -07:00
Alexandru Ardelean
4361d88892 pillow: bump to version 8.3.0
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2021-07-05 11:35:01 +03:00
Alexandru Ardelean
d3a64a36e9 django: bump to version 3.2.5
Several bug-fixes.
Fix CVE-2021-35042

Release notes:
  https://docs.djangoproject.com/en/3.2/releases/3.2.5/

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2021-07-05 10:58:30 +03:00
Michael Heimpold
7ddd5280d4 php8: update to 8.0.8
This fixes:
  - CVE-2021-21704
  - CVE-2021-21705

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2021-07-05 00:15:59 +02:00
Michael Heimpold
f15aba89f7 php7: update to 7.4.21
This fixes:
    - CVE-2021-21704
    - CVE-2021-21705

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2021-07-05 00:13:35 +02:00
Alexandru Ardelean
e2026346cc python-dateutil: add setuptools-scm build dep
Following:
  https://github.com/openwrt/packages/pull/16004
  https://github.com/openwrt/packages/pull/15995
  https://github.com/openwrt/packages/issues/15988

It seems that dateutil requires setuptools-scm to be installed.
As such, this is being added as a dependency.

Also, bump setuptools-scm to version 6.0.1

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2021-07-02 16:21:33 +03:00
Hirokazu MORIKAWA
14b43da6bd node: bump to 14.17.1
Notable Changes:
deps: update ICU to 69.1 (Michaël Zasso)
errors: align source-map stacks with spec (Benjamin Coe)

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2021-06-18 18:04:29 +09:00
Alexandru Ardelean
01d1b4581e python-cryptography: bump to version 3.4.7
Dropped patches:
  0004-Replace-EVP_CIPHER_CTX_cleanup-with-EVP_CIPHER_CTX_r.patch
  0005-Switch-get_-Update-APIs-to-get0.patch

Reworked patches:
  0001-Add-new-ASN1_STRING_get0_data-API.patch
  0006-Add-X509_STORE_CTX_trusted_stack-compatibility-macro.patch
These 2 require that we keep only the CUSTOMIZATIONS stuff for now. Maybe
later we can drop this.

Ran 'make package/python-cryptography/refresh'.

Added patch:
  0004-disable-rust.patch
upstream did a sloppy job with the CRYPTOGRAPHY_DONT_BUILD_RUST logic; we
need to patch it, to make sure the setuptools-rust isn't installed.
We may need to carry this patch in our tree for a bit longer than upstream,
because in newer versions, CRYPTOGRAPHY_DONT_BUILD_RUST logic gets removed.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2021-06-17 19:27:29 +03:00