aboutsummaryrefslogtreecommitdiff
path: root/lang
Commit message (Collapse)AuthorAge
* node: August 2023 Security ReleasesHirokazu MORIKAWA2023-08-10
| | | | | | | | | | | | | | | | | Update to v18.17.1 This is a security release. Notable Changes The following CVEs are fixed in this release: * CVE-2023-32002: Policies can be bypassed via Module._load (High) * CVE-2023-32006: Policies can be bypassed by module.constructor.createRequire (Medium) * CVE-2023-32559: Policies can be bypassed via process.binding (Medium) * OpenSSL Security Releases (Depends on shared library provided by OpenWrt) * OpenSSL security advisory 14th July. * OpenSSL security advisory 19th July. * OpenSSL security advisory 31st July Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
* Merge pull request #21747 from jefferyto/python-ifaddr-0.2.0Josef Schlehofer2023-08-10
|\ | | | | python-ifaddr: Update to 0.2.0
| * python-ifaddr: Update to 0.2.0Jeffery To2023-08-07
| | | | | | | | Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | python-click: Update to 8.1.6Jeffery To2023-08-10
| | | | | | | | Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | python-wheel: Update to 0.41.1Jeffery To2023-08-10
| | | | | | | | Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | python-flask-seasurf: Update to 1.1.1Jeffery To2023-08-10
| | | | | | | | Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | python-flask-login: Update to 0.6.2, update list of dependenciesJeffery To2023-08-10
| | | | | | | | Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | python-flask-httpauth: Update to 4.8.0Jeffery To2023-08-10
| | | | | | | | Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | python-flask-babel: Update to 3.1.0Jeffery To2023-08-10
| | | | | | | | | | | | The package changed to the poetry-core build backend. Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | python-flask-socketio: Update to 5.3.5Jeffery To2023-08-10
| | | | | | | | Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | python-socketio: Update to 5.8.0Jeffery To2023-08-10
| | | | | | | | Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | python-engineio: Update to 4.5.1Jeffery To2023-08-10
| | | | | | | | Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | Merge pull request #21734 from fractalclone/masterJeffery To2023-08-08
|\ \ | |/ |/| micropython: fix stackctrl compilation for GCC 13
| * micropython: fix stackctrl compilation for GCC 13Jean-Paul Etienne2023-08-07
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | On host PC using GCC 13, stackctrl.c fails to compile with the following error: ../py/stackctrl.c: In function 'mp_stack_ctrl_init': ../py/stackctrl.c:32:32: error: storing the address of local variable 'stack_dummy' in 'mp_state_ctx.thread.stack_top' [-Werror=dangling-pointer=] 32 | MP_STATE_THREAD(stack_top) = (char *)&stack_dummy; ../py/stackctrl.c:31:18: note: 'stack_dummy' declared here 31 | volatile int stack_dummy; | ^~~~~~~~~~~ In file included from ../py/runtime.h:29, from ../py/stackctrl.c:27: ../py/mpstate.h:296:23: note: 'mp_state_ctx' declared here 296 | extern mp_state_ctx_t mp_state_ctx; | ^~~~~~~~~~~~ cc1: all warnings being treated as errors Fixed accordingly by ignoring -dangling-pointer warning inside mp_stack_ctrl_init function. Signed-off-by: Jean-Paul Etienne <fractalclone@gmail.com>
* | Merge pull request #21739 from jefferyto/golang-1.20.7Tianling Shen2023-08-07
|\ \ | | | | | | golang: Update to 1.20.7
| * | golang: Update to 1.20.7Jeffery To2023-08-07
| |/ | | | | | | | | | | | | Includes fix for CVE-2023-29409 (crypto/tls: verifying certificate chains containing large RSA keys is slow). Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* / rust: Update to 1.71.1Tianling Shen2023-08-07
|/ | | | | | | | | | | | | | Version 1.71.1 (2023-08-03) =========================== - Fix CVE-2023-38497: Cargo did not respect the umask when extracting dependencies - Fix bash completion for users of Rustup - Do not show `suspicious_double_ref_op` lint when calling `borrow()` - Fix ICE: substitute types before checking inlining compatibility - Fix ICE: don't use `can_eq` in `derive(..)` suggestion for missing method - Fix building Rust 1.71.0 from the source tarball Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* python-dns: Update to 2.4.1Jeffery To2023-08-04
| | | | Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* python-contextlib2: Update to 21.6.0Jeffery To2023-08-04
| | | | Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* python-ciso8601: Update to 2.3.0Jeffery To2023-08-04
| | | | Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* python-certifi: Update to 2023.7.22Jeffery To2023-08-04
| | | | Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* python-cachetools: Update to 5.3.1Jeffery To2023-08-04
| | | | Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* python-cachelib: Update to 0.10.2Jeffery To2023-08-04
| | | | Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* python-colorama: Update to 0.4.6Jeffery To2023-08-04
| | | | | | The package changed to the hatchling build backend. Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* python-docutils: Update to 0.20.1Jeffery To2023-08-04
| | | | Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* python-editables: Update to 0.5Jeffery To2023-08-04
| | | | Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* python-pathspec: Update to 0.11.2Jeffery To2023-08-04
| | | | Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* python-certifi: add github runtime testEneas U de Queiroz2023-07-28
| | | | | | | This loads the module, which should return the path of the CA bundle and verifies that the file exists. Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
* python-gnupg: Update to 0.5.1Jeffery To2023-07-24
| | | | Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* python-wheel: Update to 0.41.0Jeffery To2023-07-24
| | | | Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* python-awscli: Update to 1.29.7, update dependenciesJeffery To2023-07-24
| | | | Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* python-boto3: Update to 1.28.7, update dependenciesJeffery To2023-07-24
| | | | Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* python-s3transfer: Update to 0.6.1, update dependenciesJeffery To2023-07-24
| | | | Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* python-botocore: Update to 1.31.7, update dependenciesJeffery To2023-07-24
| | | | Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* python-awesomeversion: Update to 23.5.0, update dependenciesJeffery To2023-07-24
| | | | | | The package changed to the poetry-core build backend. Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* python-atomicwrites: Update to 1.4.1Jeffery To2023-07-24
| | | | Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* python3-sqlparse: Update to 0.4.4, rename source packageJeffery To2023-07-24
| | | | | | | | | | This renames the source package to python-sqlparse to match other Python packages. This also updates the build dependencies; package now uses the flit-core build backend. Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* python-aiohttp: Update 3.8.5, update dependenciesJeffery To2023-07-24
| | | | Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* python-aiosignal: Add new packageJeffery To2023-07-24
| | | | | | | | From the README: A project to manage callbacks in asyncio projects. Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* python-frozenlist: Add new packageJeffery To2023-07-24
| | | | | | | | | | | From the README: frozenlist.FrozenList is a list-like structure which implements collections.abc.MutableSequence. The list is mutable until FrozenList.freeze is called, after which list modifications raise RuntimeError. Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* python-charset-normalizer: Add new packageJeffery To2023-07-24
| | | | | | | | | | | From the README: A library that helps you read text from an unknown charset encoding. Motivated by chardet, I'm trying to resolve the issue by taking a new approach. All IANA character set names for which the Python core library provides codecs are supported. Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* python3-pyroute2: Update to 0.7.9, rename source packageJeffery To2023-07-24
| | | | | | | | | This renames the source package to python-pyroute2 to match other Python packages. This also updates/simplifies the package dependencies. Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* python-apipkg: Update to 3.0.1Jeffery To2023-07-24
| | | | | | The package changed to the hatchling build backend. Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* python3-maxminddb: Update to 2.4.0, rename source packageJeffery To2023-07-24
| | | | | | | This renames the source package to python-maxminddb to match other Python packages. Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* python-async-timeout: Update to 4.0.2Jeffery To2023-07-24
| | | | Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* python-execnet: Update to 2.0.2Jeffery To2023-07-24
| | | | | | | The package changed to the hatchling build backend and removed the dependency on apipkg. Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* python-pip: Update to 23.2.1Jeffery To2023-07-24
| | | | Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* node: bump to v18.17.0Hirokazu MORIKAWA2023-07-23
| | | | | | | | | | | Notable Changes: *Ada 2.0 Node.js v18.17.0 comes with the latest version of the URL parser, Ada. This update brings significant performance improvements to URL parsing, including enhancements to the url.domainToASCII and url.domainToUnicode functions in node:url. *Web Crypto API Web Crypto API functions' arguments are now coerced and validated as per their WebIDL definitions like in other Web Crypto API implementations. This further improves interoperability with other implementations of Web Crypto API. Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
* rust: put host build dir to target build dirTianling Shen2023-07-23
| | | | | | | | | | | | | | | | When user runs `make clean` command, everything in `$(STAGING_DIR)` (where we installed rust) will be removed, but `$(BUILD_DIR_HOST)` (where we compiled rust and stored build stage) is untouched. So when user starts a new build after that, OpenWrt buildroot will still consider `rust` is installed already, resulting the build error "cargo: command not found". Fix this by moving to target build dir as well. Fixes: f489e019ac4a ("rust: compile host package per target") Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* Merge pull request #21585 from commodo/python-updates2Alexandru Ardelean2023-07-21
|\ | | | | django,numpy,lxml: bump versions
Powered by cgit, Themed by Ted Yin.