Update libvpx to v1.16.0 "Xenonetta Duck". Highlights include:
- Arm SVE2 and Neon optimizations for 12-tap filters.
- AVX512 implementations for Sum of Absolute Differences (SAD).
- Support for per-frame and per-spatial-layer PSNR calculation.
- ABI incompatible with the previous release.
Includes changes from intermediate releases:
- v1.15.2: Fixes CVE-2025-5283 (bug webm:413411335).
- v1.15.1: SO major version bump and changelog corrections.
- v1.15.0: New codec control for key frame filtering and RTC improvements.
Changelog: https://github.com/webmproject/libvpx/blob/v1.16.0/CHANGELOG Signed-off-by: Luiz Angelo Daros de Luca <redacted>
v10.0.0 is a major release with these key changes:
- Drop Python 3.8 and 3.9 support; minimum is now Python 3.10
- Depend on vcs-versioning for core version inference logic, allowing
other build backends to reuse it without a setuptools dependency
- Version files (write_to, version_file) are now written to the build
directory during build_py instead of the source tree during version
inference, enabling builds from read-only source directories
v10.0.1 fixes the release pipeline tooling only (no functional changes).
Full release notes:
https://github.com/pypa/setuptools-scm/releases/tag/setuptools-scm-v10.0.0
Co-Authored-By: Claude Sonnet 4.6 <redacted> Signed-off-by: Alexandru Ardelean <redacted>
python-vcs-versioning: add new package (version 1.0.1)
vcs-versioning provides the core VCS version inference logic that was
extracted from setuptools-scm into a standalone library. This enables
other build backends to use the same version inference without a
setuptools dependency.
Required as a new dependency for setuptools-scm >= 10.0.0.
Co-Authored-By: Claude Sonnet 4.6 <redacted> Signed-off-by: Alexandru Ardelean <redacted>
Pillow 12.x introduces pybind11-based C extension bindings and a
custom build backend (wrapping setuptools.build_meta). This requires:
- Replacing python-setuptools-scm with python-setuptools as build dep
- Adding python-pybind11 as a new build dependency (host)
- Updating build config settings from --build-option flags to the new
key=value format (e.g. zlib=enable, imagequant=disable)
- Removing the separate webpmux flag (merged into webp feature)
Full release notes:
https://pillow.readthedocs.io/en/stable/releasenotes/index.html
Remove 001-remove-setuptools-version-limit.patch
That's an old relic since when setuptools was packaged inside Python3
Changelog since 3.1.3:
- v3.1.4: Fix special device name access on Windows in send_from_directory
(security); fix multipart parser \r\n handling at chunk boundaries;
improve Watchdog reloader CPU efficiency
- v3.1.5: Extend Windows path protection against special device names
(security); fix multipart form parser \r\n at chunk boundaries; fix
AttributeError in DebuggedApplication with pin_security=False
- v3.1.6: Block special device names in multi-segment paths on Windows
via safe_join (security)
Add test.sh.
Full changelog:
https://werkzeug.palletsprojects.com/en/stable/changes/
Changelog since 25.3.0:
- v25.4.0: Add python-hatch-fancy-pypi-readme as build dependency
- v26.1.0: Field aliases now resolved before calling field_transformer,
with new Attribute.alias_is_default flag (#1509); fix type annotations
for validators.optional() with tuples (#1496); validators.disabled()
now supports nesting (#1513); frozen classes support
on_setattr=attrs.setters.NO_OP (#1515); attrs.fields() accepts
instances in addition to classes (#1529)
Full changelog: https://www.attrs.org/en/stable/changelog.html
Dirk Brenken [Sun, 22 Mar 2026 18:55:08 +0000 (19:55 +0100)]
adblock: update 4.5.3-3
* renamed f_query to f_search (Query => Search)
* add better input validation to the f_search function,
to compensate for the very limited Wildcard ACL mechanisms in LuCI, see
https://github.com/openwrt/luci/issues/8435 for reference
* LuCI: add a proper poll mechanism to mitigate Reporting timeouts
on "Search" and "Refresh", even with big pcap files
* LuCI: Refine some ACLs
* LuCI: more fixes & optimizations
* readme update
Dirk Brenken [Sun, 22 Mar 2026 15:14:10 +0000 (16:14 +0100)]
banip: update 1.8.1-3
* add better input validation to the f_content and f_search functions,
to compensate for the very limited Wildcard ACL mechanisms in LuCI, see
https://github.com/openwrt/luci/issues/8435 for reference
* LuCI: add a proper poll mechanism to mitigate Reporting timeouts
on "Search" and "Refresh", even with big Sets
* LuCI: Refine some ACLs
* LuCI: more fixes & optimizations
* readme update
Based on https://github.com/openwrt/packages/issues/28709#issuecomment-4060013105
it has been noted that the number config.in files was high compared to actual
config selections.
Therefore move smaller selection back into the Makefile. They are still kept
with the most appropriate package which they configure.
Changes since 0.22.1:
- Require Python >= 3.8 (dropped 3.7)
- Performance improvements and internal refactoring
- Better type annotations and mypy support
- Various bug fixes
Also add PKG_BUILD_DEPENDS on python-setuptools/host as bidict uses
setuptools.build_meta build backend.
Changes since 1.16.0:
- Drop Python 2.7 and 3.5 support
- Add ensure_str(), ensure_binary(), ensure_text() helpers
- Various minor fixes and maintenance updates
six 1.17.0 switched to pyproject.toml with setuptools build backend,
so add PKG_BUILD_DEPENDS on python-setuptools/host.
Changelog since 2.2.2:
- Add mpz.array() method for NumPy interaction
- Implement mpq.limit_denominator() functionality
- Add is_integer() method for mpz/mpq types
- Add mixed-mode arithmetic support for mpc types
- Enhanced formatting using context's rounding mode defaults
- Full free-threaded Python build support
- Fix memory leaks in MPFR/MPC cache and context exit
- Drop CPython 3.8 support (requires 3.9+)
Add test.sh.
gmpy2 2.3.0 switched to pyproject.toml with setuptools-scm for version
management. Add python-setuptools-scm/host to PKG_BUILD_DEPENDS.
Full changelog:
https://github.com/aleaxit/gmpy/releases
- Fixes multiple security critical bugs with H3 handling. CVE submission is
pending.
- Updated haproxy PKG_VERSION and PKG_HASH
- Removed get-latest-patches.sh as it is not used anymore.
- See changes: http://git.haproxy.org/?p=haproxy-3.2.git;a=shortlog
Changelog since 0.5.1:
- Add configurable I/O buffer size via buffer_size attribute (0.5.2)
- Add Web Key Directory (WKD) support for automatic key location (0.5.3)
- Fix sensitive data exposure by removing decryption result logging (0.5.3)
- Fix exception handling in on_data callable during GPG operations (0.5.4)
- Fix GPG version detection robustness (0.5.5)
- Add uid_map attribute to capture UID information (0.5.5)
- Add capability, fingerprint and keygrip to subkey_info (0.5.6)
- Fix username handling when verification keys are expired/revoked (0.5.6)
Full changelog:
https://github.com/vsajip/python-gnupg/releases
Changelog since 3.16.2:
- v3.17.0: Add CompleteDirs.inject classmethod; prevent path separators
from matching '?' wildcards in glob
- v3.18.0: Improve glob performance bypassing ZipFile.namelist; support
platform-specific path separators in glob
- v3.19.1: Fix handling of malformed zip files
- v3.19.3: Fix glob to match directories in addition to files
- v3.20.0: Expose zipfile compatibility overlay as public API (zipp.compat.overlay)
- v3.20.1: Fix infinite loops in archive name handling preserving special chars
- v3.20.2: Make zipfile compatibility overlay hashable
- v3.21.0: Enhance performance for zipfile.Path.open in non-reading modes
- v3.22.0: Fix basename-based properties on Windows; backport CPython tests
- v3.23.0: Add compatibility shim supporting Python 3.13 and earlier
Add python-setuptools/host to PKG_BUILD_DEPENDS (now requires setuptools>=77).
Patch out coherent.licensed build dependency (not packaged).
Add test.sh.
Full changelog:
https://github.com/jaraco/zipp/releases
George Sapkin [Fri, 13 Mar 2026 21:24:56 +0000 (23:24 +0200)]
syncthing: add GC and thread control variables
Add Go GC and threading control variables - GOGC, GOMEMLIMIT, and
GOMAXPROCS - to all services to allow more granular control of the
memory management on lower memory devices.
Chen Minqiang [Tue, 17 Mar 2026 11:19:30 +0000 (19:19 +0800)]
openvpn: handle netifd setup in hotplug script
- Process 'up'/'down' events to manage interface status.
- Add IPv4/IPv6 addresses and routes via netifd-proto.
- Parse DNS/search domains from foreign options.
- Convert netmasks and CIDR strings with new helpers.
- Apply MTU settings from OpenVPN environment.
Chen Minqiang [Tue, 17 Mar 2026 11:16:27 +0000 (19:16 +0800)]
openvpn: cleanup and fix netifd proto script logic
- Default to '--ifconfig-noexec' and '--route-noexec' to allow hotplug
script to handle IP and routing configuration.
- Only append '--auth-user-pass-verify' if the option is explicitly
configured to avoid unexpected authentication requirements.
- Fix missing retrieval of 'auth_user_pass', 'askpass', and 'tls_verify'.
- Remove redundant '--config' parameter (managed by option_builder).
- Simplify 'script_security' assignment logic.
Changelog since 3.1.5:
- v3.2.0: Type inference for builtin exception types; extended f-string
syntax (PEP-701); t-strings support (PEP-750); optimized PEP-604 union
type checks; freelists support for Limited API; faster fused function
dispatch; efficient C array looping for literal sequences
- v3.2.1: Fix relative imports with shared utility modules; fix GIL
acquisition crashes under lock congestion in Python 3.11
- v3.2.2: Update C-API declarations for PyDict_*Ref() functions; fix
invalid C code generation for literal sequences in generators
- v3.2.3: Add PyList_*() function declarations; fix t-strings losing
final elements in Limited API; fix excessive process requests in
parallel builds
- v3.2.4: Add @collection_type() decorator; add C++ exception declarations;
fix pseudo-literal default values in function arguments; reduce pickle
serialization size for extension types
Full changelog:
https://github.com/cython/cython/releases
Changelog since 1.5.5:
- Drop Python < 3.9 support; add Python 3.9-3.14 support
- Replace deprecated distutils with setuptools for Python 3.12+
compatibility
- Reorganize to src/ layout
- Migrate CI from Travis CI to GitHub Actions
- Fix edge cases in configure_extension() for empty compiler/linker flags
Full changelog:
https://github.com/matze/pkgconfig/releases
Changelog since 24.7.2:
- Switch build system from wheel to hatchling
- Switch runtime dependency from setuptools/pkg-resources to packaging
- Add CLI script (pipx run incremental)
- Add Python 3.13 and 3.14 support; drop Python 3.8 support
- Drop Click dependency from CLI
Update HOST_BUILD_DEPENDS to use python-hatchling/host instead of
python-wheel/host, and replace +python3-pkg-resources dependency with
+python3-packaging in DEPENDS.
Add test.sh.
Full changelog:
https://github.com/twisted/incremental/releases
Changelog since 8.0.1:
- v8.0.1: Improve test robustness; eliminate runtime dependency on setuptools
- v8.1: Drop Python 3.9 support; add Python 3.14 support
- v8.2: Consolidate package metadata into pyproject.toml; add handling
for Python 3.14's new __annotate_func__ attribute
Full changelog:
https://github.com/zopefoundation/zope.interface/releases
Fabrice Fontaine [Thu, 19 Mar 2026 22:02:36 +0000 (23:02 +0100)]
python/python-eventlet: assign PKG_CPE_ID
cpe:/a:eventlet:eventlet is the correct CPE ID for python-eventlet:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:eventlet:eventlet
Unicode® ICU 78.3 is a maintenance update on top of ICU 78 and 78.2, mostly for the CLDR 48.2 bug fixes. In addition, it fixes a C++ code point iterator bug, and updates to timezone data 2026a.
Fabrice Fontaine [Thu, 19 Mar 2026 21:25:57 +0000 (22:25 +0100)]
mail/bogofilter: fix PKG_CPE_ID
cpe:/a:bogofilter_project:bogofilter is the correct CPE ID for bogofilter:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:bogofilter_project:bogofilter
Fabrice Fontaine [Thu, 19 Mar 2026 21:19:00 +0000 (22:19 +0100)]
sound/owntone: fix typo in PKG_CPE_ID
cpe:/a:owntone:owntone_server is the correct CPE ID for owntone:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:owntone:owntone_server
Changelog since 1.3.0:
- v1.3.0: Add --config-json for JSON-based configuration; drop Python 3.8
support; fix ModuleNotFoundError when pip isn't installed
- v1.4.0: Add --quiet flag for silent operation; add --metadata option to
dump PEP 517 metadata; add support for UV environment variable;
improve Python 3.14 compatibility
Full changelog:
https://github.com/pypa/build/releases
Changelog since 1.27.0:
- v1.27.0: Update default version of core metadata to 2.4
- v1.28.0: Drop Python 3.9 support; add sbom-files option and
sbom_files build data to wheel build target for SBOM file inclusion
- v1.29.0: Fix Source Date Epoch handling for dates before 1980
Full changelog:
https://github.com/pypa/hatch/releases
Changelog since 8.1.7:
- v8.1.8: Fix type hints for open_file(); fix multiline error messages
for invalid Path; restore empty string defaults in help text
- v8.2.0: Drop Python 3.7-3.9 support; switch to pyproject.toml/flit_core;
redesign shell completion system (Bash 4.4+, Zsh, Fish);
add ProgressBar(hidden) parameter
- v8.2.1: Fix flag value handling for flag options with explicit types;
fix shell completion for nested groups
- v8.2.2: Fix default/flag_value/type parameter reconciliation; fix Zsh
completion for items containing colons
- v8.3.0: Rework flag_value and default parameters; enable default on
Argument with nargs=-1; enhance Fish shell autocompletion
- v8.3.1: Fix pager argument handling; fix prompt rendering with empty
prompt_suffix; fix parameter conversion timing issues
Add test.sh.
Full changelog:
https://github.com/pallets/click/releases
Highlights of Python 3.14:
- PEP 649: Deferred evaluation of annotations
- PEP 750: Template string literals (t-strings)
- PEP 758: Exception syntax simplification (no brackets needed)
- PEP 765: Restrict control flow in finally blocks
- PEP 779: Official free-threaded mode support
- PEP 784: Zstandard compression module
- UUID versions 6-8 support with faster generation
- Formally verified HMAC implementation
- Experimental JIT compiler support
- Tail-call interpreter option for performance
Full release notes:
https://www.python.org/downloads/release/python-3143/
Florian Eckert [Fri, 13 Mar 2026 10:18:46 +0000 (11:18 +0100)]
ddns-scripts: switch to procd handling
The 'ddns-scripts' packages still uses not the procd service handling.
This commit changes this.
This change also resolves the issue where, if a UCI configuration is
already present, the process is blocked during installation via APK and
does not complete.
Stan Grishin [Thu, 19 Mar 2026 02:28:30 +0000 (02:28 +0000)]
adblock-fast: update to 1.2.2-r12
Config:
* update pause_timeout default value to 60
* add config option rpcd_token
Init script:
* add validation for rpcd_token
Ucode script:
* fix: always reload config options on RPCD calls to prevent stale values
* fix: shell_quote curl params
* fix: do not reload is_tty on each call
Fabrice Fontaine [Wed, 18 Mar 2026 18:20:06 +0000 (19:20 +0100)]
python/python-wheel: assign PKG_CPE_ID
cpe:/a:wheel_project:wheel is the correct CPE ID for python-wheel:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:wheel_project:wheel
Fabrice Fontaine [Wed, 18 Mar 2026 18:00:17 +0000 (19:00 +0100)]
net/zerotier: assign PKG_CPE_ID
cpe:/a:zerotier:zerotierone is the correct CPE ID for zerotier:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:zerotier:zerotierone
Fabrice Fontaine [Sat, 14 Mar 2026 20:13:07 +0000 (21:13 +0100)]
sound/fluidsynth: assign PKG_CPE_ID
cpe:/a:fluidsynth:fluidsynth is the correct CPE ID for fluidsynth:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:fluidsynth:fluidsynth
Fabrice Fontaine [Sat, 14 Mar 2026 20:05:32 +0000 (21:05 +0100)]
admin/fluent-bit: assign PKG_CPE_ID
cpe:/a:treasuredata:fluent_bit is the correct CPE ID for fluent_bit:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:treasuredata:fluent_bit
Fabrice Fontaine [Sat, 14 Mar 2026 17:36:27 +0000 (18:36 +0100)]
libs/libesmtp: assign PKG_CPE_ID
cpe:/a:libesmtp_project:libesmtp is the correct CPE ID for libesmtp:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:libesmtp_project:libesmtp
Fabrice Fontaine [Tue, 17 Mar 2026 22:13:49 +0000 (23:13 +0100)]
libs/libirecovery: assign PKG_CPE_ID
cpe:/a:libimobiledevice:libirecovery is the correct CPE ID for libirecovery:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:libimobiledevice:libirecovery
Fabrice Fontaine [Tue, 17 Mar 2026 22:12:00 +0000 (23:12 +0100)]
libs/libimobiledevice: assign PKG_CPE_ID
cpe:/a:libimobiledevice:libimobiledevice is the correct CPE ID for libimobiledevice:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:libimobiledevice:libimobiledevice
git.99rst.org / openwrt-packages.git / log