Commit graph

2305 commits

Author SHA1 Message Date
Josef Schlehofer
da51877e7f
python-urllib3: Update to version 1.25.6
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-09-26 11:45:40 +02:00
Jan Pavlinec
ceadbcbb64
treewide: add PKG_CPE_ID for cvescanner
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2019-09-24 13:51:22 +02:00
Alexandru Ardelean
5f9ea76e7a gunicorn: convert to Python packaging format + add Python3 variant
And splitting the gunicorn[3] binary/executable away from the
python[3]-gunicorn libraries. This was inspired from Debian packaging.

The gunicorn[3] binaries require the new `python[3]-pkg-resources`
libraries to run, which add ~1.1 MB on the [ram]disk when uncompressed.

For the Python2 variant, the `_gaiohttp.py` is dropped as it fails to
compile, so it would likely be unusable anyway:
```
  File "/usr/lib/python2.7/site-packages/gunicorn/workers/_gaiohttp.py", line 84
    yield from self.wsgi.close()
             ^
  SyntaxError: invalid syntax

```

People around the web recommend this as well:
 https://stackoverflow.com/questions/25611140/syntax-error-installing-gunicorn
 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=803170
 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=803202

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2019-09-20 14:11:08 +03:00
Alexandru Ardelean
721642908c python,python3: add Py[3]Shebang functions & move outside of script
Some packages just install some Python binaries, that may need their
shebang fixed.
This change adds some utilities to help with that and try to centralize the
sed rules a bit.

It also removes the logic from the `python-package-install.sh` into the
`python-package[3].mk` files. This does 2 things:
1. It minimizes the need for the shell script to know the Python
   version 2/3
2. Makes the logic re-usable in packages; especially if the install rules
   differ a bit

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2019-09-20 14:10:00 +03:00
Alexandru Ardelean
ed0e77f3c3 python,python3: split python[3]-pkg-resources from setuptools
This package is required by other packages to run some binaries via
`load_entry_point`.

So, this splits this package away from setuptools.
setuptools is pretty big, akd pkg-resources is also big, but not as big.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2019-09-20 13:42:40 +03:00
Alexandru Ardelean
b104c56e2b python: change condition check for legacy opt for Python3
As I remember this worked.
But since `set -e` is set, I am a bit paranoid about it. In the sense that
it may fail if `ver` != 3.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2019-09-20 13:42:21 +03:00
Eneas U de Queiroz
acf7c540ca
python-certifi: bump to 2019.9.11
Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
2019-09-19 14:30:35 -03:00
Rosen Penev
64a02079da
django: Update to 1.11.24
Fixes a whole bunchs of CVEs:

CVE-2019-3498
CVE-2019-6975
CVE-2019-12308
CVE-2019-12781
CVE-2019-14232
CVE-2019-14233
CVE-2019-14234
CVE-2019-14235

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-09-18 14:40:47 -07:00
Jan Pavlinec
299e5b0a9b
treewide: add PKG_CPE_ID for better cvescanner coverage
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2019-09-17 12:40:26 +02:00
Karel Kočí
7bb6d72a47
python-schema: update to version 0.7.1
Signed-off-by: Karel Kočí <karel.koci@nic.cz>
2019-09-16 14:00:43 +02:00
Jeffery To
22ee6e86a0 golang: Use new -trimpath option when compiling Go packages
Go 1.13 added a new -trimpath option to the "go build" command[1] that
removes system paths from compiled executables. This replaces the
previous -trimpath flags.

There are still system paths in the compiled executable (for crti.o and
crtn.o, when cross-compiling); these appear to be stripped during the
packaging process.

[1]: https://golang.org/doc/go1.13#trimpath

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2019-09-13 17:48:40 +08:00
Rosen Penev
faabb39e9b
Merge pull request #9962 from mhei/pecl-mcrypt-license
php7-pecl-mcrypt: update PKG_LICENSE
2019-09-12 14:24:13 -07:00
Rosen Penev
b165454c2e
Merge pull request #9961 from mhei/pecl-krb5-license
php7-pecl-krb5: fix PKG_LICENSE tag
2019-09-12 14:23:58 -07:00
Rosen Penev
8a32d00186
Merge pull request #9924 from neheb/val
vala: Update to 0.46.0
2019-09-12 14:19:02 -07:00
Rosen Penev
61ccd29d37
Merge pull request #9705 from commodo/python-mysqlclient
python-mysql[client]: rename to python-mysqlclient & bump to version 1.4.4
2019-09-12 08:53:27 -07:00
Michael Heimpold
a460fd1e0e php7-pecl-mcrypt: update PKG_LICENSE
Update license tag to latest SPDX format.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2019-09-10 21:47:27 +02:00
Michael Heimpold
cafcc8b292 php7-pecl-krb5: fix PKG_LICENSE tag
According to the included license file in the package,
the license is MIT not BSD, so fix it.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2019-09-10 21:45:59 +02:00
Sven Eckelmann
bbb1ea7345 treewide: Change .*GPL.*+ licenses to SPDX compatible identifier
The CONTRIBUTING.md requests an (or multiple) SPDX identifier for GPL
licenses. But a lot of packages did use a different, non-SPDX style with a
"+" at the end instead of "-or-later".

Signed-off-by: Sven Eckelmann <sven@narfation.org>
2019-09-10 07:45:15 +02:00
Michael Heimpold
1c5454d2f4 php7-pecl-libevent: update to latest commit
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2019-09-08 23:22:27 +02:00
Michael Heimpold
bf2bd3f1e8 php7-pecl-redis: update to 5.0.2
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2019-09-08 23:22:27 +02:00
Michael Heimpold
3c7dc4ef18 php7-pecl-http: update to 3.2.1
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2019-09-08 23:22:01 +02:00
Michael Heimpold
7d095c5fc5 php7-pecl-dio: update SPDX id to most recent format
Also the source package contains a LICENSE file, so
we can refer to it.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2019-09-08 21:30:37 +02:00
Michael Heimpold
5805da860e php7: update to 7.2.22
While at, update the SPDX license id to most recent format.

Compile and run tested on mxs platform.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2019-09-08 21:27:18 +02:00
Rosen Penev
9184ea3d9b
vala: Update to 0.46.0
Switched to using the configure script instead of using make directly.

Added HOST__BUILD_PARALLEL for faster compilation.

Removed target build. It's completely unused.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-09-05 22:12:55 -07:00
Xingwang Liao
0849e32659 golang: Update to 1.13
Signed-off-by: Xingwang Liao <kuoruan@gmail.com>
2019-09-06 11:59:04 +08:00
Rosen Penev
6637feefce
Merge pull request #9885 from BKPepe/voluptuous
Voluptuous & Voluptuous Serialize: update to their latest versions
2019-09-03 12:24:24 -07:00
Rosen Penev
c64cc596e5
Merge pull request #9887 from BKPepe/sqlalchemy
python-sqlalchemy: Update to version 1.3.7
2019-09-03 11:57:13 -07:00
Rosen Penev
077ff50192
Merge pull request #9895 from BKPepe/sentry
python-sentry-sdk: Update to version 0.11.2
2019-09-03 11:56:59 -07:00
Daniel Engberg
d6e7293cb6
Merge pull request #9888 from BKPepe/slugify
python-slugify: Update to version 3.0.3
2019-09-03 08:44:30 +02:00
Jeffery To
34aa2843b7 python-pyasn1: Update to 0.4.7
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2019-09-03 02:50:10 +08:00
Alexandru Ardelean
817cdbd7c9 python-mysql: rename to python-mysqlclient & bump to version 1.4.4
The package on PyPi is named `mysqlclient`.
This should have been named `python-mysqlclient` from the start.
There is a `mysql` package on PyPi already but that's a different
code/package.

Doing this should avoid any future confusion.
There is no good time to do this rename; at least 19.07 has been branched
already and this can go into the next release [in a year or so].

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2019-09-02 15:06:28 +03:00
Josef Schlehofer
69a65de35b
python-sentry-sdk: Update to version 0.11.2
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-09-01 18:18:32 +02:00
Josef Schlehofer
2ee4b09760
python-sqlalchemy: Update to version 1.3.7
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-09-01 11:00:40 +02:00
Josef Schlehofer
d3c2ff35b5
python-slugify: Update to version 3.0.3
Change indentation in dependencies and as well in description

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-09-01 10:56:28 +02:00
Josef Schlehofer
3cfbdbf25b
python-yaml: Update to version 5.1.2
PKG_NAME should match the name of the folder

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-09-01 09:56:04 +02:00
Josef Schlehofer
af213059f5
python-voluptuous-serialize: Update to version 2.2.0
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-09-01 09:32:53 +02:00
Josef Schlehofer
0835e5e6dc
python-voluptuous: Update to version 0.11.7
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-09-01 09:32:41 +02:00
Rosen Penev
d990519a85
Merge pull request #5886 from nonicknamewasleftforme/feature/backuppc
new backuppc package w/ dependency perl-file-rsyncp
2019-08-30 16:02:49 -07:00
Rosen Penev
2972cc98eb jamvm: Add host build
Needed for classpath. GCJ is also needed but that can be dealt with
separately.

Fix compilation with musl by defining _GNU_SOURCE. What's funny here is
that if __USE_GNU gets replaced, the host build fails. The man page says
_GNU_SOURCE for pthread_getattr_np but glibc violates that statement.

Removed classpath dependency. classpaths must select jamvm, not the other
way around.

Removed target whitelist. Switched to blacklist.

Fixed License information.

Various other cleanups.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-08-30 10:32:19 -07:00
Eneas U de Queiroz
ab990af307
python-oauthlib: bump to 3.1.0
This is a feature release including improvement to OIDC and security
enhancements, as well as bugfixes.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
2019-08-22 14:40:20 -03:00
Josef Schlehofer
4f6a727042
python-sentry-sdk: Update to version 0.11.1
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-08-21 23:41:16 +02:00
Josef Schlehofer
907287be1a
ruamel-yaml: Update to version 0.15.100
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-08-21 22:09:48 +02:00
Rosen Penev
e3e13cd10d
Merge pull request #9746 from neheb/ldb
ldbus: Pass CFLAGS to luarocks
2019-08-21 02:30:31 -07:00
Rosen Penev
89457abf7d
Merge pull request #9747 from neheb/luar
luarocks: Add zip/host build dependency
2019-08-20 20:46:26 -07:00
Rosen Penev
e7b4ea09d7
Merge pull request #9781 from nxhack/node_fix_http2_dos
node: fix http/2 DoS
2019-08-20 20:19:17 -07:00
Hannu Nyman
afd396813b
Merge pull request #9707 from mstorchak/lua-bit32
lua-bit32: new package
2019-08-20 19:37:40 +03:00
Jeffery To
da0dfb1856 golang: Update to 1.12.9
Includes fixes (in 1.12.8) for:
CVE-2019-14809 - https://nvd.nist.gov/vuln/detail/CVE-2019-14809
CVE-2019-9512 - https://nvd.nist.gov/vuln/detail/CVE-2019-9512
CVE-2019-9514 - https://nvd.nist.gov/vuln/detail/CVE-2019-9514

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2019-08-20 22:03:52 +08:00
Rosen Penev
6f6366f217
ldbus: Update to latest revision
Fixes build in C11 mode. strerror_s is a Microsoft extension and not
available with musl.

Pass CFLAGS to luarocks. Otherwise, it doesn't get OpenWrt's cflags like
-Os.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-08-19 12:16:37 -07:00
Rosen Penev
8c49062998
Merge pull request #9757 from BKPepe/sentrysdk
python-sentry-sdk: Update to version 0.10.2
2019-08-17 11:57:15 -07:00
Rosen Penev
3e791f33a0
Merge pull request #9708 from mstorchak/luaposix
luaposix: update to v34.1.1
2019-08-17 11:56:45 -07:00