Commit Graph

4589 Commits

Author SHA1 Message Date
Michael Heimpold
1b7f11d96d php8: workaround libgd capability detection (refs #23846)
This is an alternative approach to #24209. Instead of switching
to bundled/internal libgd, workaround the capability detection
by giving the information to the build system directly.

PHP's original approach does not work when cross-compiling,
but since it is known which features are enabled in OpenWrt's
build, we can directly enable these features here, too.

This is not that future prove, but should do the job for the
moment until a proper solution was discussed with upstream.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2024-06-08 07:33:18 +02:00
Michael Heimpold
1dd9f4bfc8 php8: update to 8.3.8
This fixes:
    - CVE-2024-4577
    - CVE-2024-5458
    - CVE-2024-5585

Changelog: https://www.php.net/ChangeLog-8.php#8.3.8

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2024-06-08 06:17:24 +02:00
W. Michael Petullo
b560ea218e python-networkx: update to 3.3
Signed-off-by: W. Michael Petullo <mike@flyn.org>
2024-06-07 03:23:18 +08:00
Hirokazu MORIKAWA
ff7f26e379 node: bump to v20.14.0
Notable Changes
* src,permission: throw async errors on async APIs (Rafael Gonzaga)
* (SEMVER-MINOR) test_runner: support forced exit (Colin Ihrig)

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2024-06-03 16:35:03 +08:00
krant
e6a390739e erlang: update to 27.0
Signed-off-by: krant <aleksey.vasilenko@gmail.com>
2024-06-01 17:28:19 -07:00
Michael Heimpold
37a6c5846f Merge pull request #24251 from mhei/php8-update-to-8.3.7
php8: update to 8.3.7
2024-05-30 07:52:56 +02:00
W. Michael Petullo
18963ff373 python-selinux: update to 3.6
Signed-off-by: W. Michael Petullo <mike@flyn.org>
2024-05-29 18:47:42 -07:00
Michael Heimpold
533456bcc0 php8: update to 8.3.7
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2024-05-28 20:41:50 +02:00
Christian Marangi
e28bd51cab treewide: update packages to use new toolchain define
Update packages to use new toolchain define and drop usage of
TOOLCHAIN_DIR.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
2024-05-28 15:42:30 +08:00
Tianling Shen
b642f337b2 golang: Update to 1.22.3
go1.22.3 (released 2024-05-07) includes security fixes to the go command
and the net package, as well as bug fixes to the compiler, the runtime,
and the net/http package.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2024-05-28 14:09:12 +08:00
Florian Eckert
4fac186de9 Merge pull request #24146 from TDT-AG/pr/20240513-rust
rust: fix remote filesystem issue
2024-05-16 15:13:48 +02:00
Florian Eckert
6b6c74dca8 rust: add patch to fix remote filesystem issue
If the download directory is on another filesystem (NFS), then the
current implementation of bootstrapping rust fails. Because the 'syscall'
(rename) does not work on crossing filesystem boundary.

This chnage was already merged upstream to the github main rust repository.
rust-lang/rust#124975

The patch has been rebased so that it can be applied correctly.
No functional change.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2024-05-16 13:20:37 +02:00
Rosen Penev
e44aae02d0 vala: fix compilation with GCC14
Needs a cast now.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2024-05-14 10:56:51 -07:00
Hirokazu MORIKAWA
fe8b0e85af node: bump to v20.13.1
Update to v20.13.1

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2024-05-14 05:01:33 -07:00
Jianhui Zhao
2227a4c180 lua-eco: update to 3.5.1
Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>
2024-05-13 16:00:34 +08:00
Javier Marcet
356f8347de python-jsonschema: Update to 4.22.0
Release notes:
https://github.com/python-jsonschema/jsonschema/blob/main/CHANGELOG.rst#v4220

Signed-off-by: Javier Marcet <javier@marcet.info>
2024-05-11 21:56:34 +08:00
Michael Heimpold
904b8814de Merge pull request #24103 from nxhack/php8-intl-icu75
php8: Support for icu 75
2024-05-09 21:23:29 +02:00
Tianling Shen
32a22201db golang: Enable loongarch64 for Go compiler and packages
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2024-05-09 16:15:50 +08:00
Hirokazu MORIKAWA
6d6fed624f php8: Support for icu 75
Preparing to update icu4c to 75.
Created a patch for build errors in php-intl.
```
In file included from /mnt/node/openwrt/staging_dir/target-aarch64_generic_musl/usr/include/unicode/unistr.h:39,
                 from ext/intl/intl_convertcpp.h:22,
                 from ext/intl/intl_convertcpp.cpp:17:
/mnt/node/openwrt/staging_dir/target-aarch64_generic_musl/usr/include/unicode/stringpiece.h:133:29: error: 'enable_if_t' in namespace 'std' does not name a template type
  133 |             typename = std::enable_if_t<
      |                             ^~~~~~~~~~~
/mnt/node/openwrt/staging_dir/target-aarch64_generic_musl/usr/include/unicode/stringpiece.h:133:24: note: 'std::enable_if_t' is only available from C++14 onwards
  133 |             typename = std::enable_if_t<
      |                        ^~~
/mnt/node/openwrt/staging_dir/target-aarch64_generic_musl/usr/include/unicode/stringpiece.h:133:40: error: expected '>' before '<' token
  133 |             typename = std::enable_if_t<
      |                                        ^
```
The FreeBSD ports patch was used as a reference.
e680bd98d3

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2024-05-09 11:43:21 +09:00
Tianling Shen
c1b3e0440f rust: Update to 1.78.0
- Switch back to .gz tarball
- Replace local bootstrap cache hack with upstreamed option

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2024-05-05 12:49:58 +08:00
Jianhui Zhao
0c2164620d lua-eco: update to 3.5.0
MQTT code refactoring has been done since 3.5.0 that
mqtt.so no longer exists.

Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>
2024-05-04 21:37:04 +08:00
Christian Marangi
da176d58ee lua: add new package with version 5.4
Add new lua version 5.4 required by new version of nmap.

Patches are copied from lua 5.3.
- Readline patch has to be reworked as lua 5.4 now supports
no readline for Linux but still needs some tweaks for macOS
and bsd systems.
- Patch shared lib required some rework.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
2024-04-28 09:14:30 +02:00
Jianhui Zhao
e35b92835e lua-eco: update to 3.4.1
Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>
2024-04-24 19:23:21 -07:00
Hirokazu MORIKAWA
de361e98d0 node: bump to v20.12.2
This is a security release.

Notable Changes
* CVE-2024-27980 - Command injection via args parameter of child_process.spawn without shell option enabled on Windows

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2024-04-24 17:53:22 +08:00
Georgi Valkov
847a535a3b perl: fix not a Mach-O file on macOS
Reverts [1] to resolve the following build error on macOS:

/Volumes/wrt3200/openwrt/staging_dir/hostpkg/usr/bin/perl installperl --destdir=/Volumes/wrt3200/openwrt/build_dir/target-arm_cortex-a9+vfpv3-d16_musl_eabi/perl/perl-5.38.2/ipkg-install
WARNING: You've never run 'make test' or some tests failed! (Installing anyway.)
  /usr/bin/perl5.38.2
error: /Applications/Xcode.app/Contents/Developer/Toolchains/XcodeDefault.xctoolchain/usr/bin/install_name_tool: input file: /Volumes/wrt3200/openwrt/build_dir/target-arm_cortex-a9+vfpv3-d16_musl_eabi/perl/perl-5.38.2/ipkg-install/usr/bin/perl5.38.2 is not a Mach-O file

[1] 88efce3814

Signed-off-by: Georgi Valkov <gvalkov@gmail.com>
2024-04-23 19:00:11 -07:00
Rosen Penev
2fa8485ed8 luasocket: switch to local tarballs
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2024-04-23 18:58:49 -07:00
Rosen Penev
4f09c95ee2 luaexpat: use local tarballs
Smaller and avoids badly named tarball with just the version.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2024-04-23 18:58:31 -07:00
Jianhui Zhao
99bc6b2782 lua-eco: update to 3.4.0
Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>
2024-04-22 15:30:06 +08:00
Alexandru Ardelean
f5f0a4e868 python-lxml: bump to version 5.2.1
Also added python-cython/host as a build dependency.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2024-04-21 13:46:24 -07:00
Hauke Mehrtens
577259cfb9 lua-eco: Fix compilation with musl libc 1.2.5
Support POSIX basename used in musl libc 1.2.5.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2024-04-19 14:24:43 -07:00
Alexandru Ardelean
c789bcefb1 Merge pull request #23939 from commodo/python-updates1
django,django-restframework: bump versions
2024-04-19 12:32:13 +03:00
Michael Heimpold
b459d2e798 Merge pull request #23955 from mhei/php8-update-to-8.3.6
php8: update to 8.3.6
2024-04-19 06:27:36 +02:00
Josef Schlehofer
4e20600abf Merge pull request #23953 from commodo/cython-update1
python-cython: bump to version 3.0.10
2024-04-18 19:38:19 +02:00
Marcus Folkesson
eb35a3be13 python-jinja2: create /host target
Make the python-jinja2/host target available for the build environment
to be used with e.g. the PKG_BUILD_DEPENDS list.

This is needed for an upcoming package (libcamera).

Signed-off-by: Marcus Folkesson <marcus.folkesson@gmail.com>
2024-04-18 16:29:34 +02:00
Marcus Folkesson
436e462c64 python-yaml: create /host target
Make the python-yaml/host target available for the build environment
to be used with e.g. the PKG_BUILD_DEPENDS list.

This is needed for an upcoming package (libcamera).

Signed-off-by: Marcus Folkesson <marcus.folkesson@gmail.com>
2024-04-18 16:28:59 +02:00
Michael Heimpold
2682b28cb3 php8: update to 8.3.6
This fixes:
    - CVE-2024-1874
    - CVE-2024-2756
    - CVE-2024-2757
    - CVE-2024-3096

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2024-04-17 20:56:55 +02:00
Alexandru Ardelean
e3ed196f20 python-cython: bump to version 3.0.10
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2024-04-17 11:31:26 +03:00
Alexandru Ardelean
0592f27d99 django-restframework: bump to version 3.15.1
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2024-04-16 14:13:23 +03:00
Alexandru Ardelean
1a51bd18ac django: bump to version 5.0.4
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2024-04-16 14:12:52 +03:00
krant
2e8da16fb4 erlang: update to 26.2.4
Signed-off-by: krant <aleksey.vasilenko@gmail.com>
2024-04-14 12:03:21 -07:00
Alexandru Ardelean
1273c3bf7e Merge pull request #23837 from krant/numpy
numpy: update to 1.26.4
2024-04-09 08:27:46 +03:00
Josef Schlehofer
0969ce7137 Merge pull request #23824 from JiaY-shi/go
golang: update to 1.22.2
2024-04-08 14:27:55 +02:00
krant
96ee052fba numpy: update to 1.26.4
- Refresh patches

Signed-off-by: krant <aleksey.vasilenko@gmail.com>
2024-04-07 17:04:37 +03:00
Robert Marko
272f55e87f treewide: refresh hashes after move to use ZSTD as default
With the recent move to using ZSTD as the default compression format
for packaging git repo clones we must refresh all of the hashes for
the packages feed as well.

Signed-off-by: Robert Marko <robimarko@gmail.com>
2024-04-07 12:06:34 +02:00
Hirokazu MORIKAWA
ca3209a3b3 node: April 3, 2024 Security Releases
This is a security release
Notable Changes
* CVE-2024-27983 - Assertion failed in node::http2::Http2Session::~Http2Session() leads to HTTP/2 server crash- (High)
* CVE-2024-27982 - HTTP Request Smuggling via Content Length Obfuscation - (Medium)
* llhttp version 9.2.1
* undici version 5.28.4

Changed to use gz according to main-snapshot

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2024-04-07 18:01:08 +08:00
Shi JiaYang
6095a031cd golang: update to 1.22.2
go1.22.2 (released 2024-04-03) includes a security fix to the
net/http package, as well as bug fixes to the compiler, the
go command, the linker, and the encoding/gob, go/types,
net/http, and runtime/trace packages.

View the release notes for more information:
https://go.dev/doc/devel/release#go1.22.2
Find out more:
https://github.com/golang/go/issues?q=milestone%3AGo1.22.2

Signed-off-by: Shi JiaYang <shi05275@163.com>
2024-04-06 10:21:41 +08:00
Timothy M. Ace
6500758805 python-orjson: update to version 3.10.0
Relevant changes since previous 3.9.13:
- FIXED: Fix crash serializing str introduced in 3.9.11
- FIXED: Implement recursion limit of 1024 on orjson.loads()
- FIXED: Use byte-exact read on str formatting SIMD path to avoid crash
- Build now depends on Rust 1.72 or later
- Support serializing numpy.float16 (numpy.half)
- sdist uses metadata 2.3 instead of 2.1
- Improve Windows PyPI builds

Signed-off-by: Timothy M. Ace <openwrt@timothyace.com>
2024-04-03 18:21:50 -07:00
Javier Marcet
844fec9fc0 luajit2: update to v2.1-20240314
Signed-off-by: Javier Marcet <javier@marcet.info>
2024-04-01 10:49:33 +02:00
Jianhui Zhao
8eb39f3a87 lua-eco: update to 3.3.0
Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>
2024-04-01 12:55:52 +08:00
Philip Prindeville
ccabe6d8e6 perl-text-csv_xs: Update to 1.53
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2024-03-29 08:03:49 +01:00