package/cairo: bump to 1.17.4

News:
 - https://www.cairographics.org/news/cairo-1.17.2/
 - https://www.cairographics.org/news/cairo-1.17.4/

!! This is a bump to a snapshot release: 1.17.4.

But it is the first version that supports meson,
and the only version that supports both meson and autotools.

This is just an intermediate bump in order to
switch over to meson in a later commit.

Patches:
 - drop 0001-fix-nofork-build.patch, upstream: [1]
 - drop 0002-ft-Use-FT_Done_MM_Var-instead-of-free-when-available-in-cairo_ft_apply_variation.patch, upstream: [2]
 - add 0003-cairo-ft-private.h-fix-missing-FT_Color-error.patch, upstream: [3]

[1]: https://gitlab.freedesktop.org/cairo/cairo/-/commit/cb2357f481396820ec954dc4b69eafc01a8d162a
[2]: https://gitlab.freedesktop.org/cairo/cairo/-/commit/90e85c2493fdfa3551f202ff10282463f1e36645
[3]: https://gitlab.freedesktop.org/cairo/cairo/-/issues/792

Signed-off-by: Thomas Devoogdt <[email protected]>
Reviewed-by: Adrian Perez de Castro <[email protected]>
Tested-by: Adrian Perez de Castro <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>

configs/imx8mpevk: select BR2_TARGET_UBOOT_NEEDS_OPENSSL

Select BR2_TARGET_UBOOT_NEEDS_OPENSSL to fix the following build
error:

include/image.h:1394:12: fatal error: openssl/evp.h: No such file or directory
 1394 | #  include <openssl/evp.h>

Fixes: https://gitlab.com/buildroot.org/buildroot/-/jobs/5858180070
Signed-off-by: Fabio Estevam <[email protected]>
Tested-By: Sébastien Szymanski <[email protected]>
Signed-off-by: Yann E. MORIN <[email protected]>

package/python-minimalmodbus: fix empty package

Calling `setup.py` build builds and installs  an empty package
after upstream changed their packaging. Calling setuptools via
`python -m build` builds the package correctly.

Signed-off-by: Marcus Hoffmann <[email protected]>
Signed-off-by: Yann E. MORIN <[email protected]>

package/sysstat: update upstream location

The http://pagesperso-orange.fr service being down,
http://pagesperso-orange.fr/sebastien.godard/ is no longer
accessible (or more precisely serves some HTML junk), meaning that we
currently cannot download the tarball of sysstat from the official
upstream location, and we always fallback to sources.buildroot.net.

This commit therefore updates to use the new upstream location on
github.io. The 12.6.1 release is available there, with the same hash,
so we can just point to the new upstream location.

Fixes:

ERROR: while checking hashes from package/sysstat//sysstat.hash
ERROR: sysstat-12.6.1.tar.xz has wrong sha1 hash:
ERROR: expected: a730982e0c2d4964a0022c1509f3ea0a345402bc
ERROR: got     : d64a079729f2ff5b304294d68fbc041a46c4966d
ERROR: Incomplete download, or man-in-the-middle (MITM) attack

Signed-off-by: Thomas Petazzoni <[email protected]>

package/python-pytablewriter: bump to version 1.2.0

Drop no longer required python-msgfy runtime dependency.

Drop no longer required python-six runtime dependency.

Add new python-tcolorpy runtime dependency.

Signed-off-by: James Hilliard <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>

package/python-tcolorpy: new package

Signed-off-by: James Hilliard <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>

package/python-bitstring: bump to version 4.1.4

This bump will fix the following build failure raised since bump to
version 4.1.2 in commit ce2bf7b96b9dba57bb31aca583283736af27afcc:

*** Error compiling '/home/buildroot/autobuild/instance-0/output-1/target/usr/lib/python3.11/site-packages/bitstring/plugin_test.py'...
Sorry: IndentationError: expected an indented block after function definition on line 6 (plugin_test.py, line 8)

https://github.com/scott-griffiths/bitstring/blob/bitstring-4.1.4/release_notes.txt

Fixes:
 - http://autobuild.buildroot.org/results/e6fac4cac16de94862e3b4697dd88e856bc9a398

Signed-off-by: Fabrice Fontaine <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/s390-tools: bump version to 2.30.0

Signed-off-by: Alexander Egorenkov <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/python-babel: bump to version 2.14.0

Signed-off-by: James Hilliard <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/python-attrs: bump to version 23.2.0

Signed-off-by: James Hilliard <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/python-aiohttp-security: bump to version 0.5.0

Signed-off-by: James Hilliard <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/python-aioconsole: bump to version 0.7.0

Signed-off-by: James Hilliard <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/python-hatch-fancy-pypi-readme: bump to version 24.1.0

Signed-off-by: James Hilliard <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/python-argh: bump to version 0.31.0

Signed-off-by: James Hilliard <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/python-alembic: bump to version 1.13.1

Add new runtime dependencies:
 - python-sqlalchemy
 - python-mako
 - python-typing-extensions

Signed-off-by: James Hilliard <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/openblas: bump to version v0.3.26

For change log since v0.3.25, see:
https://github.com/OpenMathLib/OpenBLAS/releases/tag/v0.3.26

This commit also update _SITE url to follow download url published on
the homepage https://www.openblas.net/

Also https://github.com/xianyi/OpenBLAS is now redirecting to
https://github.com/OpenMathLib/OpenBLAS

Signed-off-by: Julien Olivain <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/python-sqlparse: bump to version 0.4.4

Migrate from setuptools to flit build backend.

Signed-off-by: James Hilliard <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>

package/python-tempora: bump to version 5.5.0

License hash changed due to copyright notice removal:
https://github.com/jaraco/tempora/commit/5957d58266e479f124b31f30e4322e798fdf386b

Drop no longer required python-six runtime dependency.

Signed-off-by: James Hilliard <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>

package/python-termcolor: bump to version 2.4.0

Signed-off-by: James Hilliard <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>

package/libzenoh-pico: disable on or1k

The upstream libzenoh-pico code uses asm("nop"), which is completely
bogus, and actually breaks build on or1k as the instruction does not
exist.

In upstream commit
https://github.com/eclipse-zenoh/zenoh-pico/commit/7d79a14addcea972e801709413f5c9a5226e3ad3
they made the asm("nop") thing "configurable" with ZP_ASM_NOP, but
still that requires some special handling for or1k. The whole thing is
a complete mess, and upstream should have to use any of that. Rather
than stacking piles of bogus stuff on more bogus stuff, let's simply
disable this package for or1k for now.

Thanks a lot to Fabrice for all the investigation, and interaction
with upstream. See
https://patchwork.ozlabs.org/project/buildroot/patch/20240110215515.1263859[email protected]/
for example.

Fixes:
 - http://autobuild.buildroot.org/results/fd0b2c666a1dc1537162d15b27743abd270243ed

Signed-off-by: Thomas Petazzoni <[email protected]>

package/sysstat: do not autodetect sa_lib_dir

The configure script of sysstat package checks host's /usr/lib64
directory for default sa_lib_dir.
Specify sa_lib_dir exclicitly to avoid host dependency.

Signed-off-by: Atsushi Nemoto <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>

package/python-s3transfer: bump to version 0.10.0

Signed-off-by: James Hilliard <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>

package/python-schedule: bump to version 1.2.1

Signed-off-by: James Hilliard <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>

package/python-scipy: bump to version 1.11.4

Signed-off-by: James Hilliard <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>

package/libxml-parser-perl: bump to version 2.47

The license file 'README' has changed due to the following diff:

-      $p3->parse($foo, ProtocolEncoding => 'ISO-8859-1');
-      close($foo);
+      $p3->parse($fh, ProtocolEncoding => 'ISO-8859-1');
+      close($fh);

This does not affect the licensing terms.

A 'LICENSE' file was added in 2.47, but it contains the terms of the
wrong license (Artistic 2.0), while this package is under Artistic or
GPL-1.0+. This has been reported upstream at
https://github.com/cpan-authors/XML-Parser/pull/99.

Signed-off-by: Kevin Cui <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>

package/python-segno: bump to version 1.6.0

License hash changed due to formatting change:
https://github.com/heuer/segno/commit/5f61bc42535b836c30015a0cef5db1e52ef8ac67

Drop no longer required python-setuptools runtime dependency.

Signed-off-by: James Hilliard <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>

package/python-simplesqlite: bump to version 1.5.2

Drop no longer required python-setuptools runtime dependency.

Drop no longer required python-six runtime dependency.

Signed-off-by: James Hilliard <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>

package/python-socketio: bump to version 5.11.0

Signed-off-by: James Hilliard <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>

package/python-stack-data: bump to version 0.6.3

Signed-off-by: James Hilliard <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>

package/python-starlette: bump to version 0.34.0

Signed-off-by: James Hilliard <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>

package/python-tabledata: bump to version 1.3.3

Signed-off-by: James Hilliard <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>

package/frr: drop libnl dependency

libnl is not needed to build frr since the addition of the package in
commit 26d82d006ba15777d19892b327bde343d82a9ff5

No mention of libnl found in https://github.com/FRRouting/frr or
https://docs.frrouting.org/projects/dev-guide/en/latest/building.html

Signed-off-by: Fabrice Fontaine <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>

support/testing: micropython: add micropython-lib test

Commit 8f403f0 "package/micropython-lib: merge with, and install
as part of micropython" brought micropython library within the
package.

This commit improves the micropython runtime test by enabling the
micropython-lib and by also adding a runtime test using one of its
module. We choose to use the gzip module, and check whther decodign q
simple gziped file works; the micropython-lib gzip can only decompress,
so we need to prepare it from the shell.

Signed-off-by: Julien Olivain <[email protected]>
Signed-off-by: Yann E. MORIN <[email protected]>

package/uboot-tools: install host-fit_check_sign

fit_check_sign is a tool for verifying fit image signatures, which gets
built if host-uboot-tools is built with fit signature support.

Install it if so.

Signed-off-by: Woodrow Douglass <[email protected]>
[Peter: reword commit message]
Signed-off-by: Peter Korsgaard <[email protected]>

package/python-requests-toolbelt: bump to version 1.0.0

Signed-off-by: James Hilliard <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/python-regex: bump to version 2023.12.25

Signed-off-by: James Hilliard <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/python-referencing: bump to version 0.32.1

Signed-off-by: James Hilliard <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/python-reedsolo: bump to version 1.7.0

License changed to Unlicense/MIT-0:
https://github.com/tomerfiliba-org/reedsolomon/commit/7b97461684701cf19451db1fd348d831dc526dc2

Signed-off-by: James Hilliard <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/python-redis: bump to version 5.0.1

License hash changed due to year update:
https://github.com/redis/redis-py/commit/28cc65c18cc4fb37ef14497c963eb181dba8d25d

Signed-off-by: James Hilliard <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/python-qrcode: bump to version 7.4.2

Add new python-pypng runtime dependency.

Add new python-typing-extensions runtime dependency.

Signed-off-by: James Hilliard <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/python-pypng: new package

Signed-off-by: James Hilliard <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/cryptsetup: bump version to 2.7.0

Signed-off-by: Giulio Benetti <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>

package/{bluez5_utils, bluez5_utils-headers}: bump to version 5.72

Changelog:
https://git.kernel.org/pub/scm/bluetooth/bluez.git/tree/ChangeLog

Removed patch which is included in this release.

Signed-off-by: Yang Li <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>

package/gst1-plugins-bad: fix webrtcdsp plugin build

The webrtc-audio-processing package was bumped from version 0.3.1 to
version 1.3 in commit ef0fa986eb7ff25c0a5db70ec0b62032e2d71538 which
broke compatibility with the gst1-plugins-bad webrtcdsp plugin.

To fix this backport a commit from upstream adding support for
webrtc-audio-processing version 1.3 to gst1-plugins-bad.

Fixes:
output/build/gst1-plugins-bad-1.22.9/ext/webrtcdsp/meson.build:7:13: ERROR: Dependency "webrtc-audio-processing" not found, tried pkgconfig and cmake

Signed-off-by: James Hilliard <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>

package/nghttp2: bump version to 1.58.0

For details see [1].

[1] https://github.com/nghttp2/nghttp2/releases/tag/v1.58.0

Signed-off-by: Peter Seiderer <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>

package/ruby: bump to 3.3.0

See here for changes:
https://www.ruby-lang.org/en/news/2023/12/25/ruby-3-3-0-released/

Patch applied upstream.

License file LEGAL changed.
[ext/psych/yaml] got removed.
[lib/bundler/vendor/molinillo] got removed.
[lib/bundler/vendor/pub_grub] added with MIT License.

Signed-off-by: Waldemar Brodkorb <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>

package/python-pyzmq: bump to version 25.1.2

License hashes/names changed due to rename/reformat:
https://github.com/zeromq/pyzmq/pull/1837

Add new host-python-setuptools-scm build dependency.

Signed-off-by: James Hilliard <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/python-pyudev: bump to version 0.24.1

Drop no longer required python-six runtime dependency.

Signed-off-by: James Hilliard <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/python-pytz: bump to version 2023.3.post1

Signed-off-by: James Hilliard <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/python-pythran: bump to version 0.15.0

Signed-off-by: James Hilliard <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

configs/icnova-a20-adb4006: bump Linux and U-Boot version

Bump version of Linux to 6.6.14 and U-Boot to 2024.01
and also use upstream configs and dts.

Signed-off-by: Ludwig Kormann <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>

package/rdma-core: fix mips4 build

The 'sync' instruction for MIPS was defined in MIPS-II as taking no
operands. MIPS32 extended the define of 'sync' as taking an optional
unsigned 5 bit immediate.

As a result, replace "sync 0" by "sync" to fix the following build
failure on mips4 raised since the addition of the package in commit
ea47e177f093d7378e8e8e1f50d6f4e3fce0a088 and
https://github.com/linux-rdma/rdma-core/commit/b7c428344ea96d446f6ffe31c620a238a7f25c9e:

/tmp/ccrBy9fV.s: Assembler messages:
/tmp/ccrBy9fV.s:994: Error: invalid operands `sync 0'

Fixes:
 - http://autobuild.buildroot.org/results/2ab22a3ec4287fc15ff6a90d8715b4897b32a933
 - http://autobuild.buildroot.org/results/2df58f9b98aacf00960932f53510b29199393461

Signed-off-by: Fabrice Fontaine <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>

package/esp-hosted: bump version to 2024-01-30

* support Linux 6.8
* support ESP32 and ESP32C6 Targets

Signed-off-by: Giulio Benetti <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>

support/testing: add tcpdump runtime test

Signed-off-by: Julien Olivain <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>

support/testing: add strace runtime test

Signed-off-by: Julien Olivain <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>

package/python-pytest: bump to version 7.4.4

Drop no longer required python-py runtime dependency.

Signed-off-by: James Hilliard <[email protected]>
Reviewed-by: Marcin Niestroj <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/python-pytest-asyncio: bump to version 0.23.3

Add new host-python-setuptools-scm build dependency.

Signed-off-by: James Hilliard <[email protected]>
Reviewed-by: Marcin Niestroj <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/wolftpm: bump version to v3.1.0

Signed-off-by: Dimitar Tomov <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>

package/flannel: Bump to version 0.24.2

Signed-off-by: Geoff Levand <[email protected]>
[Peter: drop _SOURCE]
Signed-off-by: Peter Korsgaard <[email protected]>

package/python-pyspnego: bump to version 0.10.2

Signed-off-by: James Hilliard <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/autoconf: bump to version 2.72

https://git.savannah.gnu.org/cgit/autoconf.git/tree/NEWS?h=v2.72
Signed-off-by: Francois Perrad <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>

package/python-pyrsistent: bump to version 0.20.0

License hash changed due to year update:
https://github.com/tobgu/pyrsistent/commit/acdffe6967a821165155ac16bee48054fd61385a

Signed-off-by: James Hilliard <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/python-pyopenssl: bump to version 23.3.0

Signed-off-by: James Hilliard <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/libwebsockets: bump to version 4.3.3

Drop first patch (already in version)

https://github.com/warmcat/libwebsockets/compare/v4.3.2...v4.3.3

Signed-off-by: Fabrice Fontaine <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>

package/wilc_firmware: bump to 16.1.2

Release changelog:
- Use default values for IQ calibration correction when the eFuse
  register has zero values.
- Fix for "WILC1000 Firmware initialization issue" by updating
  the PMU clock switching sequence during firmware initialization.

Signed-off-by: Kris Bahnsen <[email protected]>
Signed-off-by: Yann E. MORIN <[email protected]>

package/python-pymysql: bump to version 1.1.0

Signed-off-by: James Hilliard <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/libressl: don't export arc4random

Don't export arc4random to fix the following libcurl build failure
raised since bump of libcurl to version 8.5.0 in commit
aaa9438b96f88b1ecbf5eb9a1aebef8010835b8d and
https://github.com/curl/curl/commit/7925ba431b9a099daee1fa21d36c21887f787ad5:

rand.c: In function 'randit':
rand.c:146:26: error: implicit declaration of function 'arc4random'; did you mean 'srandom'? [-Werror=implicit-function-declaration]
  146 |     *rnd = (unsigned int)arc4random();
      |                          ^~~~~~~~~~
      |                          srandom
cc1: some warnings being treated as errors

Fixes:
 - http://autobuild.buildroot.org/results/8b7988629f1887be15c97b8c511d25443ba110d8

Signed-off-by: Fabrice Fontaine <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/python-mpd2: bump to version 3.1.1

Signed-off-by: Uladzimir Bely <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>

package/libblockdev: bump to version 3.1.0

* Rework strerror_l() patch by declaring it only in utils.h as a macro
* select BR2_PACKAGE_UTIL_LINUX_LIBUUID since it's now mandatory

Signed-off-by: Giulio Benetti <[email protected]>
[Arnout:
 - Preserve author of patch 0001.
 - Update .checkpackageignore.
]
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/fluent-bit: bump to v2.2.2

A bunch of release notes:

https://fluentbit.io/announcements/v2.1.8
https://fluentbit.io/announcements/v2.1.9
https://fluentbit.io/announcements/v2.1.10
https://fluentbit.io/announcements/v2.2.0
https://fluentbit.io/announcements/v2.2.1
https://fluentbit.io/announcements/v2.2.2

In addition:

- Dropped -fcommon fix for monkey (multiple definitions of `mk_tls_*'),
  as this is fixed upstream [1].

- Added WAMR related patches.

- Rebased the patches for v2.2.2.

[1] https://github.com/monkey/monkey/commit/627422b901af5c3c5b770d02c4a4567a0a8a61e6.

Signed-off-by: Thomas Devoogdt <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>

packge/linux-pam: bump to version 1.6.0

Drop patches (already in version)

https://github.com/linux-pam/linux-pam/releases/tag/v1.6.0

Signed-off-by: Fabrice Fontaine <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>

package/haproxy: fix runtime 'FATAL ERROR: invalid code detected -- cannot go further'

Setting HAPROXY_CFLAGS on the haproxy build command line overrides CFLAGS
which were internally set by the haproxy Makefile.

Among those omitted CFLAGS is -fwrapv. Compiling haproxy without it and
and then running the program results in runtime error:

$ haproxy
FATAL ERROR: invalid code detected -- cannot go further, please recompile!
...

To address this issue, include HAPROXY_CFLAGS in the DEFINE variable instead
of CFLAGS in haproxy.mk.

Signed-off-by: Yann E. MORIN <[email protected]>

package/libjpeg: bump to version 9f

Update hash of README (changes not related to license)

https://jpegclub.org/reference/reference-sources/

Signed-off-by: Fabrice Fontaine <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>

package/axel: fix openssl build

Replace --with-ssl by --with-ssl=openssl to avoid the following build
failure raised since bump to version 2.17.12 in commit
50ba0b0a40187b695740a2fce2d2f3ed7cbf58c5 and
https://github.com/axel-download-accelerator/axel/commit/21ccacd0c3bb415c550d590cd64aaa9bf08997a8:

configure: error: Invalid argument: --with-ssl=yes

While at it, also add wolfssl support available since
https://github.com/axel-download-accelerator/axel/commit/0759374239acaeac4105f4851cfabc28433f3bcd

Fixes:
 - http://autobuild.buildroot.org/results/a8c00442bc296353c75e393896abe9883b093a57

Signed-off-by: Fabrice Fontaine <[email protected]>
Signed-off-by: Yann E. MORIN <[email protected]>

support/testing: TestPythonPy3SciPy: increase rootfs size to 250M

The rootfs generated TestPythonPy3SciPy by doesn't fit anymore in 120M.

Increase the rootfs size to 250M and checking the amount of space
available on the file system.

  Filesystem                Size      Used Available Use% Mounted on
  /dev/root               232.3M    134.5M     85.3M  61% /

Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/5880448601

Signed-off-by: Romain Naour <[email protected]>
Reviewed-by: Antoine Coutant <[email protected]>
Signed-off-by: Romain Naour <[email protected]>

package/yasm: add YASM_CPE_ID_VENDOR

cpe:2.3:a:tortall:yasm is a valid CPE identifier for this package:

  https://nvd.nist.gov/products/cpe/detail/2E6C9C2F-A057-4083-BC90-095403EF138E

Signed-off-by: Fabrice Fontaine <[email protected]>
Signed-off-by: Yann E. MORIN <[email protected]>

package/opus: set OPUS_CPE_ID_VENDOR

cpe:2.3:a:opus-codec:opus is a valid CPE identifier for this package:

  https://nvd.nist.gov/products/cpe/detail/6C4EA9AB-4801-48FF-9737-A7C3B368C41B

Signed-off-by: Fabrice Fontaine <[email protected]>
Signed-off-by: Yann E. MORIN <[email protected]>

package/dbus: drop DBUS_CPE_ID_PRODUCT

Commit 363b4ebf1aaf4821c0c49713eba71937bd5639ca set DBUS_CPE_ID_PRODUCT
to dbus but this is not needed as DBUS_CPE_ID_PRODUCT will be set to the
package name (i.e. dbus) by default

Signed-off-by: Fabrice Fontaine <[email protected]>
Signed-off-by: Yann E. MORIN <[email protected]>

package/nfs-utils: drop NFS_UTILS_AUTORECONF

Commit 63332c33aa0771532807fd2684d4eee4eb952435 wrongly set
NFS_UTILS_AUTORECONF

Signed-off-by: Fabrice Fontaine <[email protected]>
Signed-off-by: Yann E. MORIN <[email protected]>

package/python-aiohttp: update PYTHON_AIOHTTP_CPE_ID_VENDOR

cpe:2.3:a:aiohttp_project:aiohttp has been deprecated in favor of
cpe:2.3:a:aiohttp:aiohttp in November 2023:

  <cpe-item name="cpe:/a:aiohttp_project:aiohttp:3.8.0:beta0" deprecated="true" deprecation_date="2023-11-22T17:09:16.157Z">
    <title xml:lang="en-US">Aiohttp Project Aiohttp 3.8.0 Beta 0</title>
      <reference href="https://github.com/aio-libs/aiohttp/releases">Change Log</reference>
    <cpe-23:cpe23-item name="cpe:2.3:a:aiohttp_project:aiohttp:3.8.0:beta0:*:*:*:*:*:*">
        <cpe-23:deprecated-by name="cpe:2.3:a:aiohttp:aiohttp:3.8.0:beta0:*:*:*:*:*:*" type="NAME_CORRECTION"/>

Signed-off-by: Fabrice Fontaine <[email protected]>
Signed-off-by: Yann E. MORIN <[email protected]>

package/c-ares: update C_ARES_CPE_ID_VENDOR

cpe:2.3:a:c-ares_project:c-ares has been deprecated in favor of
cpe:2.3:a:c-ares:c-ares in September 2023:

  <cpe-item name="cpe:/a:c-ares_project:c-ares:1.17.1" deprecated="true" deprecation_date="2023-09-15T11:42:40.183Z">
    <title xml:lang="en-US">C-ares Project C-ares 1.17.1</title>
      <reference href="https://github.com/c-ares/c-ares/releases">Change Log</reference>
    <cpe-23:cpe23-item name="cpe:2.3:a:c-ares_project:c-ares:1.17.1:*:*:*:*:*:*:*">
        <cpe-23:deprecated-by name="cpe:2.3:a:c-ares:c-ares:1.17.1:*:*:*:*:*:*:*" type="NAME_CORRECTION"/>

Signed-off-by: Fabrice Fontaine <[email protected]>
Signed-off-by: Yann E. MORIN <[email protected]>

package/dbus: fix CPE variables

cpe:2.3:a:d-bus_project:d-bus has been deprecated in favor of
cpe:2.3:a:freedesktop:dbus in December 2023:

  <cpe-item name="cpe:/a:d-bus_project:d-bus:1.15.6" deprecated="true" deprecation_date="2023-12-27T16:36:56.510Z">
    <title xml:lang="en-US">D-Bus Project D-Bus 1.15.6</title>
      <reference href="https://gitlab.freedesktop.org/dbus/dbus/-/tags">Version</reference>
      <reference href="https://gitlab.freedesktop.org/dbus/dbus/-/issues/457">Advisory</reference>
    <cpe-23:cpe23-item name="cpe:2.3:a:d-bus_project:d-bus:1.15.6:*:*:*:*:*:*:*">
        <cpe-23:deprecated-by name="cpe:2.3:a:freedesktop:dbus:1.15.6:*:*:*:*:*:*:*" type="NAME_CORRECTION"/>

Signed-off-by: Fabrice Fontaine <[email protected]>
Signed-off-by: Yann E. MORIN <[email protected]>

package/flex: update FLEX_CPE_ID_VENDOR

cpe:2.3:a:flex_project:flex has been deprecated in favor of
cpe:2.3:a:westes:flex in October 2023:

  <cpe-item name="cpe:/a:flex_project:flex:2.6.4" deprecated="true" deprecation_date="2023-10-06T17:12:20.950Z">
    <title xml:lang="en-US">Flex Fast Lexical Analyser 2.6.4</title>
      <reference href="https://github.com/westes/flex/releases">Version</reference>
      <reference href="https://github.com/westes/flex/">Product</reference>
    <cpe-23:cpe23-item name="cpe:2.3:a:flex_project:flex:2.6.4:*:*:*:*:*:*:*">
        <cpe-23:deprecated-by name="cpe:2.3:a:westes:flex:2.6.4:*:*:*:*:*:*:*" type="NAME_CORRECTION"/>

Signed-off-by: Fabrice Fontaine <[email protected]>
Signed-off-by: Yann E. MORIN <[email protected]>

package/json-c: update JSON_C_CPE_ID_VENDOR

cpe:2.3:a:json-c_project:json-c has been deprecated in favor of
cpe:2.3:a:json-c:json-c in September 2023:

  <cpe-item name="cpe:/a:json-c_project:json-c:0.14" deprecated="true" deprecation_date="2023-09-16T13:05:58.643Z">
    <title xml:lang="en-US">JSON-C Project JSON-C 0.14</title>
      <reference href="https://github.com/json-c/json-c/releases">Version</reference>
    <cpe-23:cpe23-item name="cpe:2.3:a:json-c_project:json-c:0.14:*:*:*:*:*:*:*">
        <cpe-23:deprecated-by name="cpe:2.3:a:json-c:json-c:0.14-20200419:*:*:*:*:*:*:*" type="NAME_CORRECTION"/>

Signed-off-by: Fabrice Fontaine <[email protected]>
Signed-off-by: Yann E. MORIN <[email protected]>

package/x11r7/xlib_libXpm: update XLIB_LIBXPM_CPE_ID_VENDOR

cpe:2.3:a:libxpm_project:libxpm has been deprecated in favor of
cpe:2.3:a:x.org:libxpm in October 2023:

  <cpe-item name="cpe:/a:libxpm_project:libxpm:3.5.15" deprecated="true" deprecation_date="2023-10-17T15:55:35.850Z">
    <title xml:lang="en-US">Libxpm Project Libxpm 3.5.15</title>
      <reference href="https://gitlab.freedesktop.org/xorg/lib/libxpm/-/tags">Version</reference>
    <cpe-23:cpe23-item name="cpe:2.3:a:libxpm_project:libxpm:3.5.15:*:*:*:*:*:*:*">
        <cpe-23:deprecated-by name="cpe:2.3:a:x.org:libxpm:3.5.15:*:*:*:*:*:*:*" type="NAME_CORRECTION"/>

Signed-off-by: Fabrice Fontaine <[email protected]>
Signed-off-by: Yann E. MORIN <[email protected]>

package/netatalk: update NETATALK_CPE_ID_VENDOR

cpe:2.3:a:netatalk_project:netatalk has been deprecated in favor of
cpe:2.3:a:netatalk:netatalk in September 2023:

  <cpe-item name="cpe:/a:netatalk_project:netatalk:3.1.13" deprecated="true" deprecation_date="2023-09-29T11:15:00.340Z">
      <reference href="https://sourceforge.net/projects/netatalk/files/netatalk/">Version</reference>
    <cpe-23:cpe23-item name="cpe:2.3:a:netatalk_project:netatalk:3.1.13:*:*:*:*:*:*:*">
        <cpe-23:deprecated-by name="cpe:2.3:a:netatalk:netatalk:3.1.13:*:*:*:*:*:*:*" type="NAME_CORRECTION"/>

Signed-off-by: Fabrice Fontaine <[email protected]>
Signed-off-by: Yann E. MORIN <[email protected]>

package/python-wheel: add CPE variables

cpe:2.3:a:wheel_project:wheel is a valid CPE identifier for this
package:

  https://nvd.nist.gov/products/cpe/detail/402C4B59-237A-4399-8189-CC9FC1B4BF39

Signed-off-by: Fabrice Fontaine <[email protected]>
Signed-off-by: Yann E. MORIN <[email protected]>

package/rauc-hawkbit-updater: drop RAUC_HAWKBIT_UPDATER_CPE_ID_VENDOR

cpe:2.3:a:pengutronix:rauc-hawkbit-updater added by commit
928b7219cd7079864eadadc66dbff21c5cd72804 has never been a valid CPE ID
for this package:

  https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe:2.3:a:pengutronix:rauc-hawkbit-updater

Signed-off-by: Fabrice Fontaine <[email protected]>
Signed-off-by: Yann E. MORIN <[email protected]>

package/linux-firmware: drop LINUX_FIRMWARE_CPE_ID_VENDOR

cpe:2.3:a:kernel:linux-firmware added by commit
63332c33aa0771532807fd2684d4eee4eb952435 has never been a valid CPE ID
for this package:

  https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe:2.3:a:kernel:linux-firmware

Signed-off-by: Fabrice Fontaine <[email protected]>
Signed-off-by: Yann E. MORIN <[email protected]>

package/wireless-regdb: drop WIRELESS_REGDB_CPE_ID_VENDOR

cpe:2.3:a:kernel:wireless-regdb added by commit
63332c33aa0771532807fd2684d4eee4eb952435 has never been a valid CPE ID
for this package:

  https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:kernel:wireless-regdb

Signed-off-by: Fabrice Fontaine <[email protected]>
Signed-off-by: Yann E. MORIN <[email protected]>

package/libvips: update LIBVIPS_CPE_ID_VENDOR

cpe:2.3:a:libvips_project:libvips has been deprecated in favor of
cpe:2.3:a:libvips:libvips in September 2023:

<cpe-item name="cpe:/a:libvips_project:libvips:8.10.6:-" deprecated="true" deprecation_date="2023-09-29T11:18:01.067Z">
    <title xml:lang="en-US">libvips Project libvips 8.10.6 -</title>
      <reference href="https://libvips.github.io/libvips/">Project</reference>
      <reference href="https://github.com/libvips/libvips/releases">Change Log</reference>
    <cpe-23:cpe23-item name="cpe:2.3:a:libvips_project:libvips:8.10.6:-:*:*:*:*:*:*">
        <cpe-23:deprecated-by name="cpe:2.3:a:libvips:libvips:8.10.6:-:*:*:*:*:*:*" type="NAME_CORRECTION"/>

Signed-off-by: Fabrice Fontaine <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>

package/minizip: fix CPE variables

cpe:2.3:a:minizip_project:minizip added by commit
425339dcdfb2d4fa16ee11231752a5cc8250e78f is not a valid CPE identifier
for this package, cpe:2.3:a:zlib-ng:minizip-ng is the correct one:

  https://nvd.nist.gov/products/cpe/detail/64E392F1-65DD-42E5-B618-AD893BA37FB3

Signed-off-by: Fabrice Fontaine <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>

package/lvm2: fix CPE variable

Commit d70da0be78779699a296e21532665ee149a2a3b8 wrongly set
LVM2_CPE_ID_PRODUCT instead of LVM2_CPE_ID_VENDOR

Signed-off-by: Fabrice Fontaine <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>

package/mpfr: fix CPE variables

cpe:2.3:a:gnu:mpfr added by commit
63332c33aa0771532807fd2684d4eee4eb952435 has never been a valid CPE
identifier for this package

cpe:2.3:a:mpfr:gnu_mpfr is a valid CPE identifier for this package:

  https://nvd.nist.gov/products/cpe/detail/7B981E0A-5BAC-4A80-A734-5FD4B51B04EF

Signed-off-by: Fabrice Fontaine <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>

package/depot-tools: drop DEPOT_TOOLS_CPE_ID_VENDOR

cpe:2.3:a:google:depot-tools added by commit
48730a1a9d882a7c56146bd2955e074aed790dcb has never been a valid CPE ID
for this package:

  https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe:2.3:a:google:depot-tools

Signed-off-by: Fabrice Fontaine <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>

package/crda: drop CRDA_CPE_ID_VENDOR

cpe:2.3:a:kernel:crda added by commit
63332c33aa0771532807fd2684d4eee4eb952435 has never been a valid CPE ID
for this package:

  https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe:2.3:a:kernel:crda

Signed-off-by: Fabrice Fontaine <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>

package/libjwt: new package

JSON Web Tokens are an open, industry standard RFC 7519
method for representing claims securely between two parties.

This Library is used by Asterisk 20.6.0 and newer.
We need to use autotools to install pkgconfig file.

Signed-off-by: Waldemar Brodkorb <[email protected]>
[Peter: drop _SOURCE, add host-pkgconf, add to DEVELOPERS]
Signed-off-by: Peter Korsgaard <[email protected]>

package/onevpl-intel-gpu: bump version to 24.1.3

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>

package/intel-mediadriver: bump version to 24.1.3

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>

package/kodi-peripheral-joystick: bump version to 20.1.15-Nexus

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>