Commit Graph

2371 Commits

Author SHA1 Message Date
Dirk Chang 992da74bbf lpeg: update to 1.0.2
lua-coxpcall: update to 1.17.0
lua-md5: update to 1.3

Signed-off-by: Dirk Chang <dirk@kooiot.com>
2019-11-01 14:55:02 +08:00
Jeffery To 635cb1309c treewide: Use pypi.mk for Python packages
This updates all Python packages that download their source from PyPi to
use pypi.mk.

This will allow future improvements/changes to pypi.mk to affect all
relevant packages.

This also makes it easier for future Python packages to start using
pypi.mk, when it's clear how it is used in existing packages.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2019-10-30 23:16:18 +08:00
Rosen Penev b266e7f5fc
Merge pull request #10387 from commodo/cffi-update
python-cffi: bump to version 1.13.1
2019-10-29 07:25:49 -07:00
Rosen Penev b09986d286
Merge pull request #10386 from commodo/pillow-update
pillow: bump to version 6.2.1
2019-10-29 07:25:39 -07:00
Alexandru Ardelean dff2fe2963 python-cffi: bump to version 1.13.1
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2019-10-29 11:35:37 +02:00
Alexandru Ardelean e78f33dace pillow: bump to version 6.2.1
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2019-10-29 11:34:36 +02:00
Alexandru Ardelean e9e687a1f1 django1: bump to version 1.11.25
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2019-10-29 10:52:29 +02:00
Luiz Angelo Daros de Luca d3d0c28149 ruby: update to 2.6.5
2.6.5 fixes:
* CVE-2019-16255: A code injection vulnerability of Shell#[] and Shell#test
* CVE-2019-16254: HTTP response splitting in WEBrick (Additional fix)
* CVE-2019-15845: A NUL injection vulnerability of File.fnmatch and File.fnmatch?
* CVE-2019-16201: Regular Expression Denial of Service vulnerability of WEBrick’s Digest access authentication

2.6.4 fixes:
* Multiple jQuery vulnerabilities in RDoc

Changelog: https://github.com/ruby/ruby/compare/v2_6_3...v2_6_5

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2019-10-27 16:07:11 -03:00
Hannu Nyman 2865853485
Merge pull request #10349 from dynasticorpheus/pytz-2019.03
python-pytz: update to 2019.03
2019-10-26 16:23:30 +03:00
Alexandru Ardelean 85887ed427
python-asn1crypto: bump to version 1.2.0
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2019-10-25 16:08:30 +02:00
Fabian Lipken 0f2cf9ebd6 python-pytz: update to 2019.03
Signed-off-by: Fabian Lipken <dynasticorpheus@gmail.com>
2019-10-24 15:30:58 +02:00
Alexandru Ardelean c21a453ffd django: split django1 package and update to 2.2.6
After many failed attempts at upgrading Django to 2.2.6, the solution seems
to be to split a `python-django1` package that works with Python2 and
upgrade `python3-django` to the latest 2.2[.6] LTS release.

This also means that all Python2 Django packages will be stuck & based on
Django 1.11[.24] LTS release. But, it's currently the sanest approach I
could find to be able to perform an upgrade of Django to 2.2, and not break
Seafile.

Upgrading Seafile is also pretty difficult, as their Python3 support is not
yet finished & released. And in the meantime, we want to allow people to
use newer Django versions.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2019-10-24 09:13:38 -03:00
Michael Heimpold cee37c2902
Merge pull request #10288 from flyn-org/php7
php7: mark /etc/config/php7-fastcgi as conffile
2019-10-21 21:05:16 +02:00
Hannu Nyman 94c344bb92
Merge pull request #10322 from jefferyto/python-2.7.17
python: Update to 2.7.17, refresh patches
2019-10-21 21:53:23 +03:00
Hannu Nyman 7a49d8a232
Merge pull request #10314 from commodo/python-3-8
python3: bump to version 3.8
2019-10-21 18:36:13 +03:00
Jeffery To 83b300aa83 python: Update to 2.7.17, refresh patches
Patches already merged and so removed:
* 011-fix-ssl-build-use-have-npn.patch
* 019-bpo-36216-Add-check-for-characters-in-netloc-that-normalize-to-separators-GH-12216.patch
* 020-bpo-36216-Only-print-test-messages-when-verbose-GH-12291.patch
* 021-2.7-bpo-35121-prefix-dot-in-domain-for-proper-subdom.patch
* 022-bpo-30458-Disallow-control-chars-in-http-URLs-GH-13315.patch
* 023-bpo-35907-Avoid-file-reading-as-disallowing-the-unnecessary-URL-scheme-in-urllib-GH-11842.patch
* 027-bpo-38243-Escape-the-server-title-of-DocXMLRPCServer.patch
* 028-bpo-34155-Dont-parse-domains-containing-GH-13079.patch

Patches no longer necessary and so removed:
* 017_lib2to3_fix_pyc_search.patch

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2019-10-21 23:30:53 +08:00
Jeffery To 1bacdd52f7 python,python3: Add PYPI_SOURCE_NAME to pypi.mk
This adds a new (optional) variable, PYPI_SOURCE_NAME, to pypi.mk.

For some PyPi packages (e.g. aiohttp_cors, click, django-compressor),
the name of the package and the source tarball name are slightly
different (usually by capitalisation or hyphen/underscore change).

This new variable is to make this difference explicit. PYPI_NAME is
meant for the "official" package name, whereas PYPI_SOURCE_NAME is meant
for the source tarball name.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2019-10-21 15:27:04 +02:00
Jeffery To a8bf6a8bd6 python-ipaddress: Update to 1.0.23
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2019-10-21 21:10:55 +08:00
Jeffery To 46c43b29f7 python-automat: Update to 0.8.0
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2019-10-21 21:10:35 +08:00
Jeffery To f2d744d31a python-attrs: Update to 19.3.0
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2019-10-21 21:10:04 +08:00
Alexandru Ardelean 48277ec915 python3: bump to version 3.8
This required a bit work to get working, compared to other versions. So,
some things have changed a bit more significantly.

Some highlights:
* there is no longer a pgen executable, seems this is now part of
  libpython; let's see what this means for us in the future
* blake2 hash (from OpenSSL) detection needs some fixing; will upstream
  added patch 002-fix-blake2-detection.patch
* removed all bpo patches; those should be fixed in upstream
* some needed to be manually re-applied as stuff changed:
  - 001-enable-zlib.patch  - file changed
  - 004-do-not-write-bytes-codes.patch  - file changed
  - 015-abort-on-failed-modules.patch - variable was renamed
    cross_compiling -> CROSS_COMPILING
* 017_lib2to3_fix_pyc_search.patch - the code changed, it does not seem to
     have the original problem with respect to file-extension, as there
     does not seem to be any special extension logic anymore there
* 006-remove-multi-arch-and-local-paths.patch - dropped patch; I can't
     remember the full-details of this issue; it was something with
     Debian/Ubuntu's multi-arch stuff; it was probably added maybe due to
     some overzealous (on my part) thingy caused by some weird reports,
     that I could never solve; let's have this patch dropped and see
* make package/python3/refresh to reduce fuzz for the rest

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2019-10-21 15:24:51 +03:00
Jeffery To 9d892e3cf8
python-cryptography: Update to 2.8
With this update, the package no longer depends on python-asn1crypto[1].

[1]: https://github.com/pyca/cryptography/blob/master/CHANGELOG.rst#28---2019-10-16

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2019-10-21 13:41:33 +02:00
Jeffery To 141ead6bd7 python-cffi: Update to 1.13.0
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2019-10-21 05:19:23 +08:00
W. Michael Petullo 5bc9bb04c5 php7: mark /etc/config/php7-fastcgi as conffile
Signed-off-by: W. Michael Petullo <mike@flyn.org>
2019-10-19 18:13:41 -04:00
Josef Schlehofer 10d55f63d6
golang: Update to version 1.13.3
Fixes CVE-2019-17596

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-10-19 22:53:25 +02:00
Rosen Penev 5096509945 vala: Update to 0.46.3
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-10-18 15:06:57 -07:00
Rosen Penev 758865fa16
Merge pull request #10242 from jefferyto/pypi-mk
python,python3: Add pypi makefile
2019-10-18 13:26:37 -07:00
Jeffery To add4c42191 python,python3: Add pypi makefile
This adds pypi.mk, which can be included in Python packages that
download their sources from PyPI, to auto-fill various PKG_* variables
based on the value of PYPI_NAME.

This makefile should be included after $(TOPDIR)/rules.mk but before
$(INCLUDE_DIR)/package.mk (and $(INCLUDE_DIR)/host-build.mk).

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2019-10-19 00:16:26 +08:00
Michael Heimpold b8c22fc1ec php7-mod-xmlreader: add conditional dependency to php7-mod-dom (fixes #10201)
PHP7 fails to load xmlreader.so (php7-mod-xmlreader) module without
dom.so (php7-mod-dom) module loaded:

-snip-
PHP Warning:  PHP Startup: Unable to load dynamic library 'xmlreader.so'
 (tried: /usr/lib/php/xmlreader.so (Error relocating /usr/lib/php/xmlreader.so:
 dom_node_class_entry: symbol not found), /usr/lib/php/xmlreader.so.so (Error
 loading shared library /usr/lib/php/xmlreader.so.so: No such file or
 directory)) in Unknown on line 0
^C
-snap-

However, this dependency only exists when during build also php7-mod-dom
is selected.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2019-10-16 00:04:24 +02:00
Jeffery To 5848f67e41 python-pyasn1-modules: Update to 0.2.7
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2019-10-16 02:12:51 +08:00
Rosen Penev 2dc860e24b
Merge pull request #10181 from commodo/python-simple-json-drop-tests
python[3]-simplejson: drop tests from simplejson package
2019-10-14 01:03:18 -07:00
Rosen Penev 7ec627cdc9
Merge pull request #10227 from flyn-org/luasec
luasec: update to 0.8.2
2019-10-14 00:56:34 -07:00
Rosen Penev ffafefba87
Merge pull request #10228 from flyn-org/php7-pecl-mcrypt
php7-pecl-mcrypt: update to 1.0.3
2019-10-13 20:09:12 -07:00
W. Michael Petullo 007e74146b php7-pecl-mcrypt: update to 1.0.3
Signed-off-by: W. Michael Petullo <mike@flyn.org>
2019-10-13 16:49:05 -04:00
W. Michael Petullo b9e7e3c98e luasec: update to 0.8.2
Signed-off-by: W. Michael Petullo <mike@flyn.org>
2019-10-13 16:43:02 -04:00
Rosen Penev 91c79bad56
Merge pull request #10209 from etactica/pulls/luaposix-docs
luaposix: disable documentation build
2019-10-13 11:42:30 -07:00
Rosen Penev 3365165bd6
Merge pull request #10211 from BKPepe/sentrysdk
python-sentry-sdk: Update to version 0.12.3
2019-10-12 21:17:41 -07:00
Josef Schlehofer fd9ebe3d70
python-sentry-sdk: Update to version 0.12.3
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-10-12 23:55:36 +02:00
Jeffery To 53e1692ae9 treewide: Use default PKG_BUILD_DIR when possible
This removes lines that set PKG_BUILD_DIR when the set value is no
different from the default value.

Specifically, the line is removed if the assigned value is:

* $(BUILD_DIR)/$(PKG_NAME)-$(BUILD_VARIANT)/$(PKG_NAME)-$(PKG_VERSION)

  The default PKG_BUILD_DIR was updated[1] to incorporate BUILD_VARIANT
  if it is set, so now this is identical to the default value.

* $(BUILD_DIR)/$(PKG_NAME)-$(BUILD_VARIANT)/$(PKG_SOURCE_SUBDIR)

  if PKG_SOURCE_SUBDIR is set to $(PKG_NAME)-$(PKG_VERSION), making it
  the same as the previous case

* $(BUILD_DIR)/$(PKG_NAME)-$(PKG_VERSION)

  This is the same as the default PKG_BUILD_DIR when there is no
  BUILD_VARIANT.

* $(BUILD_DIR)/[name]-$(PKG_VERSION)

  where [name] is a string that is identical to PKG_NAME

[1]: https://git.openwrt.org/?p=openwrt/openwrt.git;a=commit;h=e545fac8d968864a965edb9e50c6f90940b0a6c9

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2019-10-13 02:01:34 +08:00
Karl Palsson b683fad607 luaposix: disable documentation build
Lost when luaposix converted their upstream build system.
Required to prevent the build from attempting to invoke "ldoc" on the
host and also simply to speed it up.

Signed-off-by: Karl Palsson <karlp@tweak.net.au>
2019-10-12 13:52:20 +00:00
Rosen Penev 96f44c5c33
Merge pull request #10182 from jefferyto/python-attrs-19.2.0
python-attrs: Update to 19.2.0
2019-10-09 12:50:07 -07:00
Rosen Penev 25d0c17dfb
Merge pull request #10187 from commodo/python-asn1crypto-update
python-asn1crypto: bump to version 1.0.1
2019-10-09 12:43:20 -07:00
Alexandru Ardelean 03f625047d python-asn1crypto: bump to version 1.0.1
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2019-10-09 13:23:28 +03:00
Alexandru Ardelean 929df778cc python-pillow: bump to version 6.2.0
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2019-10-09 11:53:46 +03:00
Jeffery To d62dc51634 python-attrs: Update to 19.2.0
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2019-10-09 05:18:44 +08:00
Alexandru Ardelean 2f19a94d65 python[3]-simplejson: drop tests from simplejson package
These tests take-up a bit of space. And they aren't typically needed.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2019-10-08 16:53:36 +03:00
Jeffery To a3be5cfa92 python,python3: Fix CVE-2019-16056, CVE-2019-16935
These patches address issues:
CVE-2019-16056: email.utils.parseaddr mistakenly parse an email
CVE-2019-16935: A reflected XSS in python/Lib/DocXMLRPCServer.py (for
Python 2.7)

CVE-2019-16935 was fixed for python3 in #10109

Links to Python issues:
https://bugs.python.org/issue34155
https://bugs.python.org/issue38243

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2019-10-04 23:54:46 +08:00
Jeffery To 47d6d8e514 python-simplejson: Fix python[3]-decimal dependency
simplejson depends on the decimal module[1][2]. This adds
python[3]-decimal to the package's DEPENDS.

[1]: https://github.com/simplejson/simplejson/blob/v3.16.0/simplejson/__init__.py#L110
[2]: https://github.com/simplejson/simplejson/blob/v3.16.0/simplejson/encoder.py#L7

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2019-10-04 22:40:25 +08:00
Michael Heimpold f14a76253a
Merge pull request #10126 from stefaang/php7-mod-gd
php7-mod-gd: enable libwebp
php7: bump to 7.2.23
2019-10-03 14:32:46 +02:00
Stefaan Ghysels dacda44755 php7: bump to 7.2.23
Signed-off-by: Stefaan Ghysels <stefaang@gmail.com>
2019-10-03 13:44:23 +02:00