package/python-dbus-fast: drop python-async-timeout dependency

async-timeout dependency was dropped upstream for Python 3.11 (see [1]).

[1] https://github.com/Bluetooth-Devices/dbus-fast/commit/1b5c9e1cb94d19925776d91196cf1b657264c494

Signed-off-by: Marcin Niestroj <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/raptor: fix build with newer versions of libxml2

Fixes:
http://autobuild.buildroot.net/results/6a5/6a5139fe86b8370477dc6cb044bf29180bd145df/

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/python-bleak: bump to version 0.20.2

Signed-off-by: Marcin Niestroj <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/python-xmodem: bump to version 0.4.7

Right now there is a LICENSE file included in the package, so use it for
license validation.

Signed-off-by: Marcin Niestroj <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

python-gpiozero: migrate to setup.cfg

setup.cfg seems to be mandatory since (at least) setuptools 67.8.0
otherwise gpiozero dependencies are not properly detected

File "/builds/buildroot.org/buildroot/test-output/TestPythonPy3Gpiozero/host/lib/python3.11/site-packages/pkg_resources/__init__.py",
line 868, in _resolve_dist
    raise DistributionNotFound(req, requirers)
pkg_resources.DistributionNotFound: The 'colorzero' distribution was not found and is required by the application

See:
http://lists.busybox.net/pipermail/buildroot/2023-June/669207.html

Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/4505977906

Signed-off-by: Romain Naour <[email protected]>
Cc: James Hilliard <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

DEVELOPERS: remove Bernd Kuhls from package/x11r7/

Remove packages which are no longer runtime-tested here.

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/x11r7/xkeyboard-config: bump version to 2.38

Release notes:
https://gitlab.freedesktop.org/xkeyboard-config/xkeyboard-config/-/blob/master/NEWS

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/x11r7/xfont_font-*: mass version bump

Release notes were posted in February 2023:
https://lists.x.org/archives/xorg-announce/2023-February/date.html

Switched tarball to xz and _SITE to https.

Updated license hash of xfont_font-sun-misc due to upstream commit which
removed "All rights reserved" from Oracle copyright notices:
https://gitlab.freedesktop.org/xorg/font/sun-misc/-/commits/master/COPYING

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/x11r7/xorgproto: bump version to 2023.1

Release notes:
https://lists.x.org/archives/xorg-announce/2023-June/003404.html

Updated license hash due to upstream commit which removed "All rights
reserved" from Oracle copyright notices:
https://gitlab.freedesktop.org/xorg/proto/xorgproto/-/commit/423098656f145afeb72cbf21aaa0b3a3f9bc36bb

Added license file COPYING-xwaylandproto:
https://gitlab.freedesktop.org/xorg/proto/xorgproto/-/commit/ad6412624ef6dc4d7548fe16c254c4166ffa7198

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/x11r7/xlib_libdmx: bump version to 1.1.5

Release notes:
https://lists.x.org/archives/xorg-announce/2023-June/003403.html

Switched tarball to xz and _SITE to https.

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/x11r7/xapp_xrdb: bump version to 1.2.2

Release notes:
https://lists.x.org/archives/xorg-announce/2023-June/003401html

Switched tarball to xz.

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/x11r7/xapp_xwd: bump version to 1.0.9

Release notes:
https://lists.x.org/archives/xorg-announce/2023-June/003400.html

Switched tarball to xz.

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/x11r7/xlib_xtrans: bump version to 1.5.0

Release notes:
https://lists.x.org/archives/xorg-announce/2023-June/003399.html

Updated license hash due to upstream commit which removed "All rights
reserved" from Oracle copyright notices:
https://gitlab.freedesktop.org/xorg/lib/libxtrans/-/commit/9d77996f9f972da63c06099fd8c0f0529159b98f

Added XLIB_XTRANS_INSTALL_TARGET = NO, quoting release notes:
"xtrans is a library of code that is shared among various X packages to
 handle network protocol transport in a modular fashion, allowing a single
 place to add new transport types - but it is *not* a shared library, more
 like a "header-only" library."

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/x11r7/xapp_setxkbmap: bump version to 1.3.4

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/x11r7/xdriver_xf86-video-i128: bump version to 1.4.1

Release notes:
https://lists.x.org/archives/xorg-announce/2023-May/003395.html

Switched tarball to xz and _SITE to https.

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/x11r7/xdriver_xf86-video-dummy: bump version to 0.4.1

Release notes:
https://lists.x.org/archives/xorg-announce/2023-May/003394.html

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/python-setuptools: migrate to pep517 build backend

Now that all dependencies of host-python-setuptools no longer
use setuptools as a build backend we can now migrate setuptools
itself to the pep517 build backend.

Signed-off-by: James Hilliard <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/python-wheel: new host package

This will be required for upcoming setuptools pep517 support.

Signed-off-by: James Hilliard <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/pkg-python.mk: switch back to local setuptools distutils

We overrode the default in 4386bbdf0895dbb35e02c25f42603bae9af64451 to
work around target shebang bug, as this issue no longer appears to be
present lets revert back to the local version as this is what will be
use in the future when distutils is removed from the python stdlib.

Tested with:
$ support/testing/run-tests -d dl -o output_folder -k tests.package.test_ipython.TestIPythonPy3
15:43:26 TestIPythonPy3                           Starting
15:43:27 TestIPythonPy3                           Building
15:49:35 TestIPythonPy3                           Building done
Downloading to /home/buildroot/buildroot/dl/tmp_iyk_fn6
Renaming from /home/buildroot/buildroot/dl/tmp_iyk_fn6 to /home/buildroot/buildroot/dl/kernel-versatile-5.10.7
Downloading to /home/buildroot/buildroot/dl/tmpokk23l2z
Renaming from /home/buildroot/buildroot/dl/tmpokk23l2z to /home/buildroot/buildroot/dl/versatile-pb-5.10.7.dtb
15:50:04 TestIPythonPy3                           Cleaning up
.
----------------------------------------------------------------------
Ran 1 test in 398.709s

OK

$ head -n 1 output_folder/TestIPythonPy3/target/usr/bin/ipython
#!/usr/bin/python

Signed-off-by: James Hilliard <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/python-packaging: bump to version 23.1

Signed-off-by: Marcin Niestroj <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/python-typing-extensions: bump to version 4.6.3

License file was synced with CPython project (see [1]).

[1] https://github.com/python/typing_extensions/commit/bb75d261196aa6f520d1b80b373891c860ebb71b

Signed-off-by: Marcin Niestroj <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/python-pytest-asyncio: bump to version 0.21.0

Signed-off-by: Marcin Niestroj <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/python-pytest: bump to version 7.3.2

Signed-off-by: Marcin Niestroj <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/open-plc-utils: bump to version 1ba7d5a042e4e8ff6858b08e113eec5dc4e89cf2

Other changes:
 - Remove 0002-plc-plc.h-fix-build-with-gcc-10.patch as
   related MR https://github.com/qca/open-plc-utils/pull/141
   has been merged.

Notable changes since last version:

 - Drop privileges after opening the channel file descriptor
 - Remove all checks for root permissions
 - Add chip identification for QCA7006AQ

Signed-off-by: Kai Stuhlemmer (ebee Engineering) <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/iwd: bump version to 2.6

Changelog:
https://git.kernel.org/pub/scm/network/wireless/iwd.git/tree/ChangeLog

Depends on ell >= 0.57:
https://git.kernel.org/pub/scm/network/wireless/iwd.git/commit/configure.ac?id=464f5c25db8150dc8cea21042a5bac09a8880edc

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/ell: bump version to 0.57

Changelog:
https://git.kernel.org/pub/scm/libs/ell/ell.git/tree/ChangeLog

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/libcgroup: bump to version 2.0.3

https://github.com/libcgroup/libcgroup/releases/tag/v2.0.3

Also remove redundant LIBCGROUP_SOURCE definition, since there's no
longer an uploaded bz2 archive.

Signed-off-by: Oleg Lyovin <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/ubus: bump version to f787c97

Changelog:

  - 66baa44b8dee libubus: introduce new status messages
  - b3cd5ab4c010 cli: use UBUS_STATUS_PARSE_ERROR
  - 584f56a23314 cli: improve error logging for call command
  - 2f793a4eb063 lua: add optional path filter to objects() method
  - 2bebf93cd334 ubusd: handle invoke on event object without data
  - 9913aa61de73 ubusd: add lookup command queuing support
  - f787c97b3489 libubus: add missing uloop_fd_delete call in ubus_shutdown

Signed-off-by: Peter Seiderer <[email protected]>
Signed-off-by: Yann E. MORIN <[email protected]>

package/libubox: bump version to 75a3b87

Changelog:

  - be3dc7223a6d uloop: avoid integer overflow in tv_diff
  - 123e976f3d01 uloop: restore return type of uloop_timeout_remaining
  - 334415738150 uloop: add uloop_timeout_remaining64
  - c87d3e1fb67d lua/uloop: use uloop_timeout_remaining64
  - c86a894ec63d uloop: deprecate uloop_timeout_remaining
  - cce5e351278b vlist: define vlist_for_each_element_safe
  - f2d6752901f2 blob: clear buf->head when freeing a buffer
  - 45210ce14136 list.h: add container_of_safe macro
  - cfa372ff8aed blobmsg: implicitly reserve space for 0-terminator in string buf alloc
  - d2223ef9da71 blobmsg: work around false positive gcc -Warray-bounds warnings
  - ea56013409d5 jshn.sh: add json_add_fields function for adding multiple fields at once
  - b09b316aeaf6 blobmsg: add blobmsg_parse_attr function
  - eac92a4d5d82 blobmsg: add blobmsg_parse_array_attr
  - ef5e8e38bd38 usock: fix poll return code check
  - 6fc29d1c4292 jshn.sh: Add pretty-printing to json_dump
  - 5893cf78da40 blobmsg: Don't do at run-time what can be done at compile-time
  - 362951a2d96e uloop: fix uloop_run_timeout
  - 75a3b870cace uloop: add support for integrating with a different event loop

Signed-off-by: Peter Seiderer <[email protected]>
Signed-off-by: Yann E. MORIN <[email protected]>

{linux, linux-headers}: bump 4.{14, 19}.x / 5.{4, 10, 15}.x / 6.{1, 3}.x series

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Yann E. MORIN <[email protected]>

package/gstreamer1/gst1-plugins-good: add adaptivedemux2 plugin option

Currently there is no explicit way to enable/disable the adaptivedemux2
plugin. Create a menu entry allowing users to disable or enable the plugin,
like we have for other features.

Signed-off-by: Dario Binacchi <[email protected]>
[[email protected]: use plugin name in prompt, drop useless help]
Signed-off-by: Yann E. MORIN <[email protected]>

configs/mx53loco: select BR2_TARGET_UBOOT_NEEDS_OPENSSL

Select  BR2_TARGET_UBOOT_NEEDS_OPENSSL to fix the following
build error:

include/image.h:1383:12: fatal error: openssl/evp.h: No such file or directory

Reported-by: Jan-Benedict Glaw <[email protected]>
Signed-off-by: Fabio Estevam <[email protected]>
Signed-off-by: Yann E. MORIN <[email protected]>

package/python-setuptools: bump to version 68.0.0

Signed-off-by: James Hilliard <[email protected]>
Signed-off-by: Yann E. MORIN <[email protected]>

package/python-cryptography: bump to version 39.0.2

Signed-off-by: James Hilliard <[email protected]>
Signed-off-by: Yann E. MORIN <[email protected]>

package/heimdal: Use perl module JSON:PP, part of core, instead of JSON package

Fixes:
http://autobuild.buildroot.net/results/48b/48b52d205150e30e522b40d1c7b51f339ae8b0db/

This patch ports the existing patch for the samba4 package:
https://git.busybox.net/buildroot/tree/package/samba4/0004-3rdparty-heindal-Use-perl-module-JSON-part-of-core-i.patch

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Yann E. MORIN <[email protected]>

package/samba4: update patch 0004

Fix typo in title, add upstream URL

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Yann E. MORIN <[email protected]>

package/{mesa3d, mesa3d-headers}: bump version to 23.1.3

Release notes:
https://lists.freedesktop.org/archives/mesa-announce/2023-June/000723.html

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Yann E. MORIN <[email protected]>

package/dahdi-linux: fix build with kernel >= 6.3

Fixes:
http://autobuild.buildroot.net/results/2bb/2bb8a38b12cb3a7650162f1f7f65b56b20711d64/

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Yann E. MORIN <[email protected]>

package/mesa3d: fix 002-vc4-add-meson-option-to-disable-optional-neon-suppor.patch

Update 002-vc4-add-meson-option-to-disable-optional-neon-suppor.patch to
fix an syntax error introduced by commit 'package/{mesa3d, mesa3d-headers}:
bump version to 23.1.0' ([1])

Fixes:

  .../build/mesa3d-23.1.2/src/gallium/drivers/vc4/meson.build:87:76: ERROR:
  Trying to compare values of different types (UserFeatureOption, str) using !=.
  This was deprecated and undefined behavior previously and is as of 0.60.0 a hard error.

[1] https://git.buildroot.net/buildroot/commit/?id=e6203db11ed40122a2d9f29012db5683a7eb10d0

Signed-off-by: Peter Seiderer <[email protected]>
Signed-off-by: Yann E. MORIN <[email protected]>

package/fftw: bump version to 3.3.10

Release notes: http://fftw.org/release-notes.html

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Yann E. MORIN <[email protected]>

package/kodi: fix build error with flatbuffers 23.x

Fixes build error with defconfig

BR2_x86_64=y
BR2_TOOLCHAIN_BUILDROOT_CXX=y
BR2_ROOTFS_DEVICE_CREATION_DYNAMIC_EUDEV=y
BR2_PACKAGE_KODI=y
BR2_PACKAGE_MESA3D=y
BR2_PACKAGE_MESA3D_GALLIUM_DRIVER_IRIS=y
BR2_PACKAGE_MESA3D_OPENGL_EGL=y
BR2_PACKAGE_MESA3D_OPENGL_ES=y
BR2_PACKAGE_PYTHON3=y
BR2_PACKAGE_PYTHON3_PY_ONLY=y

caused by bumping flatbuffers to version >= 23.x in commit
3d1ee7d624b71009ff61d4fa5ed860c52eb89b47

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Yann E. MORIN <[email protected]>

package/opensc: bump version to 0.23.0

Release notes:
    https://github.com/OpenSC/OpenSC/blob/master/NEWS

Also carry two patches from upstream to fix build against newer
LibreSSL. Those patches can't be backported to pre-0.23.0 versions,
though.

Fixes:
    http://autobuild.buildroot.net/results/913/91318abb98146dd967115ed6233949daa60d8bba/

Signed-off-by: Bernd Kuhls <[email protected]>
[[email protected]: squash LibreSSL fixes together with bump]
Signed-off-by: Yann E. MORIN <[email protected]>

DEVELOPERS: remove José Pekkarinen

E-mails are bouncing:

<[email protected]>: host ASPMX.L.GOOGLE.com[74.125.133.26] said:
    550-5.1.1 The email account that you tried to reach does not exist. Please
    try 550-5.1.1 double-checking the recipient's email address for typos or
    550-5.1.1 unnecessary spaces. Learn more at 550 5.1.1

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Yann E. MORIN <[email protected]>

petitboot: add pb-discover daemon

Signed-off-by: Laurent Vivier <[email protected]>
Reviewed-by: Cédric Le Goater <[email protected]>
Reviewed-by: Joel Stanley <[email protected]>
[Arnout: also source /etc/default file]
Signed-off-by: Arnout Vandecappelle <[email protected]>

linux: make kconfig depend on host-make

Commit 0b9efc991f ("linux: use BR2_MAKE") switched LINUX_MAKE to
$(BR2_MAKE). However, this also implicitly sets LINUX_KCONFIG_MAKE.

Thus, when host-make is being used in a build that has
PER_PACKAGE_DIRECTORIES enabled, the dotconfig step will try to use the
make instance from the host directory, but since it is not listed in
LINUX_KCONFIG_DEPENDENCIES, it won't be available yet at that point in
time.

Add an explicit dependency to LINUX_KCONFIG_DEPENDENCIES to have it
copied over early enough.

Signed-off-by: Florian Larysch <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/nodejs: security bump to version 16.20.0

Fixes the following security issues:

- CVE-2023-23918: Node.js Permissions policies can be bypassed via
  process.mainModule (High)

- CVE-2023-23919: Node.js OpenSSL error handling issues in nodejs crypto
  library (Medium)

- CVE-2023-23920: Node.js insecure loading of ICU data through ICU\_DATA
  environment variable (Low)

- CVE-2023-23936: Fetch API in Node.js did not protect against CRLF
  injection in host headers (Medium)
  https://github.com/nodejs/undici/security/advisories/GHSA-5r9g-qh6m-jxff

- CVE-2023-24807: Regular Expression Denial of Service in Headers in Node.js
  fetch API (Low)
  https://github.com/nodejs/undici/security/advisories/GHSA-r6ch-mqf9-qc9w

For more details, see the advisory:
https://nodejs.org/en/blog/vulnerability/february-2023-security-releases

Update LICENSE hash after an update of the openssl license snippet:
https://github.com/nodejs/node/commit/e7ed56f501389978e4619ab697a812631c4061ff

Signed-off-by: Peter Korsgaard <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/c-ares: security bump to version 1.19.1

Fixes the following security issues:

- CVE-2023-32067: High.  0-byte UDP payload causes Denial of Service
- CVE-2023-31147 Moderate.  Insufficient randomness in generation of DNS
  query IDs
- CVE-2023-31130.  Moderate.  Buffer Underwrite in ares_inet_net_pton()
- CVE-2023-31124.  Low.  AutoTools does not set CARES_RANDOM_FILE during
  cross compilation

Signed-off-by: Peter Korsgaard <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/python-django: security bump to version 4.1.9

Fixes the following security issues:

- CVE-2023-31047: Potential bypass of validation when uploading multiple
  files using one form field

https://www.djangoproject.com/weblog/2023/may/03/security-releases/

In addition, 4.1.8 fixed a bug related to secrets rotation:
https://docs.djangoproject.com/en/4.2/releases/4.1.8/

Signed-off-by: Peter Korsgaard <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/ccache: fix license hash

Buildroot commit 1db3f0f84449843476c2887d2ea09323c66f33a4 failed to
update the license hash which is needed due to various commits in 2023
updating package versions and copyright year:
https://github.com/ccache/ccache/commits/master/LICENSE.adoc

Fixes:
http://autobuild.buildroot.net/results/41b/41b3427e30b6e44352fc78b27360fdadf9e46393/

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/check: switch to cmake

The autoconf-build system fails to properly detect vsnprintf

    checking for vsnprintf... yes
    checking whether vsnprintf is C99 compliant... no

which leads to a build error

    snprintf.c:495:1: error: inlining failed in call to 'always_inline'
     'rpl_vsnprintf.localalias': function not inlinable

Building with cmake fixes the problem:

-- Looking for vsnprintf
-- Looking for vsnprintf - found

The cmake build system has an option to disable checkmk, so we don't
need to remove it from target anymore.

Fixes:
http://autobuild.buildroot.net/results/e55/e5562513226de902dae642526165b1555a540144/

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

linux: fix kernel hashes

Fixes commit which added hashes for wrong files:
https://git.busybox.net/buildroot/commit/?id=88108f9793f5824fa058b878974f234ebe834325

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Yann E. MORIN <[email protected]>

package/hwdata: install to staging

hwdata provides a .pc file, which other packages can look up to find the
location where hwdata files are, and use them at build time.

This is the case for the upcoming libdisplay-info package, which
requires the hwdata's PNP IDs at build time.

However, installing the .pc file is not enough. Indeed, meson (which
libdisplay-info uses) will look for the corresponding data files in
datadir, which it locates relative to the sysroot, which is our staging.

So, we also need to install the hwdata files in staging.

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Yann E. MORIN <[email protected]>

package/inadyn: update description, how to enable HTTPS support

Signed-off-by: Joachim Wiberg <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/inadyn: bump to v2.11.0

Upstream ChageLog, summary:

 - Add wildcard support for Cloudflare
 - New DDNS providers from DD-WRT;
     - goip.de
     - myonlineportal.net
     - desec.io (a.k.a. dedyn.io)
     - domaindiscount24.com
     - dy.fi
     - do.de (Domain-Offensive)
     - Domopoli.de
     - inwx
     - It's DNS
     - Joker.com
     - all-inkl.com
     - core-networks.de
     - dnsever.com
     - dnshome.de
     - dnsmadeeasy.com
     - dnsmax.com
     - schokokeks.org
     - variomedia.de
     - udmedia.de
     - moniker.com
     - dyndns.it
     - infomaniak.com
     - oray.com
     - simply.com
     - mydns.jp
     - myonlineportal.net
     - namecheap.com
     - regfish.de
     - twodns.de
 - Support for updating both ipv4 and ipv6 address for same provider
 - Add new command line options -L and -S NAME to list supported
   providers and their respective details
 - Add 'success' as a valid generic response to DNS update
 - Fix use after free in logger at inadyn exit
 - Use dynv6 'auto' IP only if we have not detected an address
 - Replace unstable api.ipify.org with http://ifconfig.me
 - Fix default checkip server for dnsexit.com
 - Fix easydns response code problem

Signed-off-by: Joachim Wiberg <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/zxing-cpp: bump to version 2.0.0

Signed-off-by: James Hilliard <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/python-cython: bump to version 0.29.35

Signed-off-by: James Hilliard <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/python-flit-core: bump to version 3.9.0

Signed-off-by: James Hilliard <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/python-installer: bump to version 0.7.0

Signed-off-by: James Hilliard <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/python-pillow: bump to version 9.5.0

License hash changed due to wording update:
https://github.com/python-pillow/Pillow/commit/997932bc93c778919fe22f4838ef0929482fe520

Signed-off-by: James Hilliard <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/python-pycryptodomex: bump to version 3.18.0

Signed-off-by: James Hilliard <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/python-pydal: bump to version 20230521.1

Signed-off-by: James Hilliard <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/python-pydantic: bump to version 1.10.8

Signed-off-by: James Hilliard <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/python-pydyf: bump to version 0.6.0

Signed-off-by: James Hilliard <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/python-pygments: bump to version 2.15.1

Signed-off-by: James Hilliard <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/python-pyphen: bump to version 0.14.0

Signed-off-by: James Hilliard <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/python-requests: bump to version 2.31.0

Signed-off-by: James Hilliard <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/python-selenium: bump to version 4.9.1

Signed-off-by: James Hilliard <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/python-yarl: bump to version 1.9.2

License file now contains the full Apache 2.0 license instead of just a
reference to it:
https://github.com/aio-libs/yarl/commit/cc4a11e961fb24b5658df1c5125b26cb44c0b875

Signed-off-by: James Hilliard <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/python-weasyprint: bump to version 59.0

Signed-off-by: James Hilliard <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/python-txaio: bump to version 23.1.1

License has changed due to company name update:
https://github.com/crossbario/txaio/commit/91dace6ad1ddef3741d8c4db70d0e8728db046f0

Signed-off-by: James Hilliard <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/python-setuptools: bump to version 67.8.0

License hash changed due to name removal:
https://github.com/pypa/setuptools/commit/5957d58266e479f124b31f30e4322e798fdf386b

Signed-off-by: James Hilliard <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/{rust, rust-bin}: bump to version 1.70.0

Link to Rust 1.70.0 announcement: https://blog.rust-lang.org/2023/06/01/Rust-1.70.0.html

Signed-off-by: James Hilliard <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/python-setuptools-rust: bump to version 1.6.0

Drop no longer required host-python-setuptools-scm and
host-python-toml dependencies.

Signed-off-by: James Hilliard <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/nettle: bump version to 3.9.1

Release notes:
https://lists.gnu.org/archive/html/info-gnu/2023-05/msg00007.html
https://lists.gnu.org/archive/html/info-gnu/2023-06/msg00000.html

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>

package/ncurses: bump version to 6.4.20230603

Release notes:
https://github.com/ThomasDickey/ncurses-snapshots/blob/master/NEWS

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>

package/mpg123: bump version to 1.31.3

Removed md5 hash, switched _SITE to https.

Updated license hash due to copyright year bump.

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>

package/mcelog: bump version to 194

Changelog:
https://git.kernel.org/pub/scm/utils/cpu/mce/mcelog.git/log/

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>

package/intel-gmmlib: bump version to 22.3.7

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>

{linux, linux-headers}: bump 4.{14, 19}.x / 5.{4, 10, 15}.x / 6.{1, 3}.x series

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>

package/jhead: security bump to version 3.08

Fixes the following security issue:

- CVE-2022-41751: Jhead 3.06.0.1 allows attackers to execute arbitrary OS
  commands by placing them in a JPEG filename and then using the
  regeneration -rgt50 option.

Update readme.txt hash after a minor tweak of the text:
https://github.com/Matthias-Wandel/jhead/commit/a0eed69daa6ad4b824eb81fb6e3be95de3f783c2

Signed-off-by: Peter Korsgaard <[email protected]>

package/{mesa3d, mesa3d-headers}: bump version to 23.1.2

Release notes:
https://lists.freedesktop.org/archives/mesa-announce/2023-May/000721.html
https://lists.freedesktop.org/archives/mesa-announce/2023-June/000722.html

Removed patch which is included in this version bump:
https://cgit.freedesktop.org/mesa/mesa/commit/?id=2630f4b310f534c830250be44d285e485da83869

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>

package/python3: security bump version to 3.11.4

Rebased two patches.

Changelog:
https://docs.python.org/release/3.11.4/whatsnew/changelog.html#python-3-11-4

Fixes the following security problems:

- gh-99889: Fixed a security in flaw in uu.decode() that could allow for
  directory traversal based on the input if no out_file was specified.

- gh-104049: Do not expose the local on-disk location in directory
  indexes   produced by http.client.SimpleHTTPRequestHandler.

- gh-102153: urllib.parse.urlsplit() now strips leading C0 control and
  space characters following the specification for URLs defined by WHATWG
  in response to CVE-2023-24329. Patch by Illia Volochii.

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>

package/ghostscript: security bump version to 10.01.1

Switch tarball to .xz

Fixes CVE-2023-28879:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28879

Release notes:
https://ghostscript.readthedocs.io/en/latest/News.html?utm_source=ghostscript&utm_medium=website&utm_content=inline-link

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>

package/flatbuffers: bump version to 23.5.26

Changelog:
https://github.com/google/flatbuffers/blob/master/CHANGELOG.md

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>

package/fetchmail: bump version to 6.4.37

Release notes:
https://sourceforge.net/p/fetchmail/mailman/message/37770051/
https://sourceforge.net/p/fetchmail/mailman/message/37783197/

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>

package/ethtool: bump version to 6.3

Release notes:
https://git.kernel.org/pub/scm/network/ethtool/ethtool.git/tree/NEWS

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>

package/mc: bump to version 4.8.29

Signed-off-by: Francois Perrad <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>

package/libgtk3: bump to version 3.24.38

Signed-off-by: Francois Perrad <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>

package/libplist: bump version to 2.3.0

Release notes:
https://github.com/libimobiledevice/libplist/releases/tag/2.3.0

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>

package/libinput: bump version to 1.23.0

Release notes:
https://lists.freedesktop.org/archives/wayland-devel/2022-June/042245.html
https://lists.freedesktop.org/archives/wayland-devel/2022-November/042515.html
https://lists.freedesktop.org/archives/wayland-devel/2023-January/042583.html
https://lists.freedesktop.org/archives/wayland-devel/2023-March/042642.html

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>

package/libedit: bump version to 20221030-3.1

Rebased patch, switched _SITE to https.

Changelog: https://www.thrysoee.dk/editline/

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>

package/libcodec2: bump version to 1.1.0

Removed patch which is included in this version.

Release notes: https://github.com/drowe67/codec2/releases/tag/v1.1.0

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>

package/libcap: security bump version to 2.69

Fixes
- CVE-2023-2602
  https://git.kernel.org/pub/scm/libs/libcap/libcap.git/commit/?id=bc6b36682f188020ee4770fae1d41bde5b2c97bb
- CVE-2023-2603
  https://git.kernel.org/pub/scm/libs/libcap/libcap.git/commit/?id=422bec25ae4a1ab03fd4d6f728695ed279173b18

Updated license hash due to an upstream commit which added a SPDX header:
https://git.kernel.org/pub/scm/libs/libcap/libcap.git/commit/?id=70998415a87587f31063a26a1e52c6f7806b7834

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>

package/less: bump version to 633

Removed patch which is included in this version.

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>

package/leafpad: bump version to 0.8.19

Changelog: https://github.com/tarot231/leafpad/blob/main/ChangeLog

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>

package/lcms2: bump version to 2.15

Release notes: https://littlecms.com/blog/2023/03/01/lcms2-2.15/

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>

package/kodi-pvr-nextpvr: bump version to 20.4.2-Nexus

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>

{linux, linux-headers}: bump 4.{14, 19}.x / 5.{4, 10, 15}.x / 6.{1, 3}.x series

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>

package/meson: bump to version 1.1.1

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>

package/hwdata: bump version to 0.371

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>