Weekly portage-stable package updates 2024-10-07

[github-actions]

CI: http://jenkins.infra.kinvolk.io:8080/job/container/job/sdk/1780/cldsv/

--

• app-admin/perl-cleaner:

  • from 2.31 to 2.31-r2
  • nothing of interest

• app-arch/libarchive: [PROD] [DEV]

  • from 3.7.4 to 3.7.6
  • fixes CVE-2024-26256, CVE-2024-48957, CVE-2024-48958
    • update: libarchive Flatcar#1544
  • release notes: https://github.com/libarchive/libarchive/releases/tag/v3.7.6 https://github.com/libarchive/libarchive/releases/tag/v3.7.5

• app-crypt/ccid:

  • from 1.5.4 to 1.5.5
  • unstable on arm64, so added accept keywords to overlay profiles
  • release notes: https://github.com/LudovicRousseau/CCID/blob/1.5.5/README.md#history

• app-crypt/gnupg: [PROD] [DEV]

  • from 2.4.5-r1 to 2.4.5-r2
  • unstable on arm64, so added accept keywords to overlay profiles
  • nothing of interest

• app-crypt/pinentry: [PROD] [DEV]

  • from 1.3.0-r3 to 1.3.1
  • unstable on arm64, so added accept keywords to overlay profiles
  • release notes: https://git.gnupg.org/cgi-bin/gitweb.cgi?p=pinentry.git;a=blob;f=NEWS;h=a07d18953341a4eb65c9873e64c06bc7c642606d;hb=dd8894fa60c1f1c08ecc50ba4657580abc348347

• app-crypt/rhash:

  • from 1.4.3 to 1.4.4-r1
  • fix an issue with assignment in configure script
  • release notes: https://github.com/rhash/RHash/releases/tag/v1.4.4

• app-crypt/tpm2-tools: [PROD] [DEV]

  • still at 5.7
  • bumped python compat to 3.10..13
  • dropped the use of which

• app-portage/elt-patches:

  • from 20240824 to 20240912
  • unstable on arm64, so added accept keywords to overlay profiles
  • release notes: https://gitweb.gentoo.org/proj/elt-patches.git/commit/?id=4a1d8825ac850cc1a60868879c82fd642e896066

• app-portage/portage-utils:

  • from 0.96.1 to 0.97
  • drop dependency on dev-libs/openssl
  • dropped qtegrity USE flag
    • qtegrity has no extra deps, so it is built unconditionally now
    • dropped the qtegrity USE flag mask from overlay profiles
  • release notes: https://gitweb.gentoo.org/proj/portage-utils.git/log/?h=v0.97

• app-shells/bash: [PROD] [DEV]

  • from 5.2_p26-r6 to 5.2_p37
  • unstable on arm64, so added accept keywords to overlay profiles
  • provided new version of bashrc file for setting the window title

• dev-build/ninja:

  • from 1.11.1-r5 to 1.12.1
  • unstable on arm64, so added accept keywords to overlay profiles
  • bumped python compat to 3.10..13
  • release notes: https://github.com/ninja-build/ninja/releases/tag/v1.12.1 https://github.com/ninja-build/ninja/releases/tag/v1.12.0

• dev-db/sqlite: [PROD] [DEV]

  • from 3.46.0 to 3.46.1
  • unstable on arm64, so added accept keywords to overlay profiles
  • release notes: https://www.sqlite.org/releaselog/3_46_1.html

• dev-debug/strace: [PROD] [DEV]

  • still at 6.9
  • added support for verify-sig

• dev-lang/perl:

  • still at 5.40.0
  • became stable, so dropped accept keywords from overlay profiles

• dev-lang/python: [AZURE] [DEV] [GCE] [SYSEXT-PYTHON]

  • from 3.11.10 to 3.11.10_p1
  • refactored test skipping
  • add a workaround for a build accessing system site-packages

• dev-lang/swig:

  • still at 4.2.1
  • fixed some build issue affecting tests

• dev-lang/tcl:

  • from 8.6.13-r1 to 8.6.14
  • unstable on arm64, so add accept keywords to overlay profiles
  • dropped -Werror
  • release notes: https://sourceforge.net/p/tcl/mailman/message/58743251/

• dev-libs/jsoncpp:

  • from 1.9.5-r1 to 1.9.6
  • release notes: https://github.com/open-source-parsers/jsoncpp/releases/tag/1.9.6

• dev-libs/libassuan: [PROD] [DEV]

  • from 2.5.7 to 3.0.0
  • unstable on arm64, so added accept keywords to overlay profiles
  • release notes: https://git.gnupg.org/cgi-bin/gitweb.cgi?p=libassuan.git;a=blob;f=NEWS;h=48ece8b1cf8b81bdf835db00079ae247742cd398;hb=0351ecfa4f35ad44684075abec153574986b11bd

• dev-libs/libdnet: [VMWARE]

  • still at 1.18.0-r1
  • became stable, but apparently there were no accept keywords to drop for the package in overlay profiles

• dev-libs/libgpg-error: [PROD] [DEV]

  • from 1.49 to 1.50
  • unstable on arm64, so added accept keywords to overlay profiles
  • release notes: https://git.gnupg.org/cgi-bin/gitweb.cgi?p=libgpg-error.git;a=blob;f=NEWS;h=b865ecc7197a4f60b1530958fbb25a92bdfdc3de;hb=bb732615daad9bba9026354ae90f0f5292ea4908

• dev-libs/libnl: [PROD] [DEV]

  • from 3.9.0 to 3.10.0
  • unstable on arm64, so added accept keywords to overlay profiles
  • release notes: https://lists.infradead.org/pipermail/libnl/2024-July/002440.html

• dev-libs/libpipeline: [DEV]

  • from 1.5.7 to 1.5.8
  • release notes: https://gitlab.com/libpipeline/libpipeline/-/blob/dd37cf76496b4b999509bd133657c1fc021e3a5f/NEWS.md

• dev-libs/oniguruma: [PROD] [DEV]

  • from 6.9.8 to 6.9.9
  • release notes: https://github.com/kkos/oniguruma/releases/tag/v6.9.9

• dev-libs/tree-sitter:

  • from 0.22.6 to 0.23.0
  • release notes: https://github.com/tree-sitter/tree-sitter/releases/tag/v0.23.0

• dev-libs/tree-sitter-bash:

  • from 0.21.0-r1 to 0.23.1
  • release notes: https://github.com/tree-sitter/tree-sitter-bash/commits/v0.23.1/

• dev-libs/userspace-rcu: [PROD] [DEV]

  • from 0.14.0 to 0.14.1
  • unstable on arm64, so added accept keywords to overlay profiles
  • release notes: https://lists.lttng.org/pipermail/lttng-dev/2024-August/030860.html

• dev-libs/xmlsec: [VMWARE]

  • from 1.3.3-r1 to 1.3.4
  • release notes: https://github.com/lsh123/xmlsec/releases/tag/1.3.4

• dev-libs/yajl: [SYSEXT-PODMAN]

  • still at 2.1.0-r5
  • became stable on amd64, so updated accept keywords from overlay profiles

• dev-python/hatch-vcs:

  • new package, at 0.4.0

• dev-python/idna: [SYSEXT-PYTHON]

  • from 3.8 to 3.10
  • release notes: https://github.com/kjd/idna/blob/v3.10/HISTORY.rst

• dev-python/more-itertools: [SYSEXT-PYTHON]

  • from 10.4.0 to 10.5.0
  • release notes: https://github.com/more-itertools/more-itertools/blob/v10.5.0/docs/versions.rst#1050

• dev-python/msgpack: [SYSEXT-PYTHON]

  • from 1.0.8 to 1.1.0
  • release notes: https://github.com/msgpack/msgpack-python/blob/v1.1.0/ChangeLog.rst#110

• dev-python/platformdirs: [SYSEXT-PYTHON]

  • from 4.2.2 to 4.3.6
  • release notes: https://github.com/tox-dev/platformdirs/releases/tag/4.3.6

• dev-python/rich: [SYSEXT-PYTHON]

  • from 13.7.1 to 13.8.1
  • release notes: https://github.com/Textualize/rich/releases/tag/v13.8.1

• dev-python/setuptools: [SYSEXT-PYTHON]

  • still at 73.0.1
  • downgraded dev-python/setuptools-rust from hard-blocker to soft-blocker

• dev-python/snakeoil:

  • from 0.10.8 to 0.10.9
  • release notes: https://github.com/pkgcore/snakeoil/releases/tag/v0.10.9

• dev-python/tree-sitter:

  • from 0.22.3-r2 to 0.23.0
  • bumped dependency on dev-libs/tree-sitter to >=0.23.0
  • release notes: https://github.com/tree-sitter/py-tree-sitter/releases/tag/v0.23.0

• dev-python/trove-classifiers: [SYSEXT-PYTHON]

  • from 2024.7.2 to 2024.9.12
  • release notes: https://github.com/pypa/trove-classifiers/releases/tag/2024.9.12

• dev-python/urllib3: [SYSEXT-PYTHON]

  • from 2.2.2 to 2.2.3
  • added a build dependency on dev-python/hatch-vcs
  • release notes: https://github.com/urllib3/urllib3/releases/tag/2.2.3

• dev-util/gdbus-codegen:

  • still at 2.78.6
  • bumped python compat to 3.10..13

• dev-util/glib-utils:

  • still at 2.78.6
  • bumped python compat to 3.10..13

• dev-util/pahole: [DEV]

  • still at 1.27-r1
  • bumped python compat to 3.10..13
  • fixed tar invocation

• dev-util/pkgcheck:

  • from 0.10.30-r1 to 0.10.31
  • bumped dependency on dev-python/tree-sitter to 0.23.0
  • release notes: https://github.com/pkgcore/pkgcheck/releases/tag/v0.10.31

• dev-util/pkgconf: [PROD] [DEV]

  • from 2.2.0 to 2.3.0
  • unstable on arm64, so added accept keywords to overlay profiles
  • release notes: https://github.com/pkgconf/pkgconf/blob/pkgconf-2.3.0/NEWS

• dev-vcs/git: [PROD] [DEV]

  • from 2.44.2 to 2.45.2
  • bumped python compat to 3.10..13
  • fixed cross-compilation issues with curl
  • release notes: https://github.com/git/git/blob/v2.45.2/Documentation/RelNotes/2.45.2.txt https://github.com/git/git/blob/v2.45.1/Documentation/RelNotes/2.45.1.txt https://github.com/git/git/blob/v2.45.0/Documentation/RelNotes/2.45.0.txt

• eclass/autotools.eclass:

  • forced autoheader to make the changes

• eclass/cargo.eclass:

  • avoid clobbering existing flags

• eclass/guile-single.eclass:

  • fixed function exporting

• eclass/java-utils-2.eclass:

  • docs
  • dropped support for jikes

• eclass/ruby-utils.eclass:

  • made ruby 3.2 a stable preference

• eclass/toolchain.eclass:

  • added support for gdc cross compilation
  • added fixes for ada builds

• eclass/xdg.eclass:

  • fixed function exporting

• licenses:

  • added MikroTik

• net-analyzer/tcpdump: [PROD] [DEV]

  • from 4.99.4-r1 to 4.99.5
  • unstable on arm64, so added accept keywords to overlay profiles
  • replaced USE=drop-root with USE=caps
  • release notes: https://github.com/the-tcpdump-group/tcpdump/blob/tcpdump-4.99.5/CHANGES

• net-dns/c-ares: [PROD] [DEV]

  • from 1.29.0 to 1.33.1
  • unstable on arm64, so added accept keywords to overlay profiles
  • release notes: https://github.com/c-ares/c-ares/releases/tag/v1.33.1 https://github.com/c-ares/c-ares/releases/tag/v1.33.0 https://github.com/c-ares/c-ares/releases/tag/v1.32.3 https://github.com/c-ares/c-ares/releases/tag/v1.32.2 https://github.com/c-ares/c-ares/releases/tag/v1.32.1 https://github.com/c-ares/c-ares/releases/tag/v1.32.0 https://github.com/c-ares/c-ares/releases/tag/v1.31.0 https://github.com/c-ares/c-ares/releases/tag/v1.30.0

• net-firewall/ipset: [PROD] [DEV]

  • from 7.22-r1 to 7.22-r2
  • unstable on arm64, so added accept keywords to overlay profiles
  • added a patch for fixing a build on musl

• net-libs/gnutls: [PROD] [DEV]

  • from 3.8.5-r1 to 3.8.7.1-r1
  • unstable on arm64, so updated accept keywords to overlay profiles
  • bumped dependency on nettle to >=3.10
  • release notes: https://gitlab.com/gnutls/gnutls/-/blob/3.8.7/NEWS https://gitlab.com/gnutls/gnutls/-/blob/3.8.6/NEWS

• net-libs/libpcap: [PROD] [DEV]

  • still at 1.10.5
  • became stable on amd64, so updated accept keywods in overlay profiles

• net-libs/libpsl: [PROD] [DEV]

  • still at 0.21.5
  • bumped python compat to 3.10..13

• net-misc/chrony: [AZURE]

  • from 4.5 to 4.6
  • unstable on arm64, so added accept keywords to overlay profiles
  • release notes: https://gitlab.com/chrony/chrony/-/blob/4.6/NEWS

• net-misc/curl: [PROD] [DEV]

  • from 8.9.1-r1 to 8.10.1
  • still unstable, so updated accept keywords to overlay profiles
  • fixes CVE-2024-8096
    • update: curl Flatcar#1543
  • enabled USE=websockets by default
  • release notes: https://curl.se/ch/8.10.1.html https://curl.se/ch/8.10.0.html

• net-misc/iperf: [DEV]

  • from 3.16 to 3.17.1
  • unstable on arm64, so added accept keywords to overlay profiles
  • release notes: https://github.com/esnet/iperf/releases/tag/3.17.1 https://github.com/esnet/iperf/releases/tag/3.17

• net-misc/openssh: [PROD] [DEV]

  • from 9.7_p1-r6 to 9.8_p1-r2
  • unstable on arm64, so added accept keywords to overlay profiles
  • fixes CVE-2024-39894
    • update: openssh Flatcar#1557
  • updated sshd service to use "Type=notify-reload" instead of "ExecReload=/bin/kill -HUP $MAINPID"
  • release notes: https://www.openssh.com/txt/release-9.8

• net-misc/rsync: [PROD] [DEV]

  • still at 3.3.0-r1
  • bumped python compat to 3.10..13

• perl-core/File-Temp:

  • from 0.231.100 to 0.231.100-r1
  • added a patch fixing the usage of _PC_CHOWN_RESTRICTED

• profiles:

  • app-crypt/gnupg >=2.5 masked
    • updating may require resetting the keyrings, so this needs to be watched

• sys-apps/azure-vm-utils:

  • from 0.2.0 to 0.3.0
  • renamed from sys-apps/azure-nvme-utils
  • dropped USE=lun-fallback, enabled by default in the project
  • release notes: https://github.com/Azure/azure-vm-utils/releases/tag/v0.3.0

• sys-apps/bubblewrap:

  • from 0.8.0 to 0.10.0
  • unstable on arm64, so added accept keywords to overlay profiles
  • release notes: https://github.com/containers/bubblewrap/releases/tag/v0.10.0 https://github.com/containers/bubblewrap/releases/tag/v0.9.0

• sys-apps/dtc:

  • from 1.6.0 to 1.7.1
  • EAPI 8
  • unstable on arm64, so added accept keywords to overlay profiles
  • added USE=python and USE=test, both disabled
  • rewritten to use the meson build system
  • release notes: https://git.kernel.org/pub/scm/utils/dtc/dtc.git/tag/?h=v1.7.1 https://git.kernel.org/pub/scm/utils/dtc/dtc.git/tag/?h=v1.7.0 https://git.kernel.org/pub/scm/utils/dtc/dtc.git/tag/?h=v1.6.1

• sys-apps/gptfdisk: [PROD] [DEV]

  • from 1.0.9-r3 to 1.0.10-r1
  • release notes: https://sourceforge.net/p/gptfdisk/code/ci/53ac725a88a616b9f3395500d6e520aa04742fa5/tree/NEWS

• sys-apps/kmod: [PROD] [DEV]

  • from 32-r2 to 33
  • unstable on arm64, so added accept keywords to overlay profiles
  • release notes: https://github.com/kmod-project/kmod/blob/v33/NEWS

• sys-apps/man-db: [DEV]

  • from 2.12.1 to 2.13.0
  • unstable on arm64, so added accept keywords to overlay profiles
  • bumped sys-apps/groff dependency to >=1.20.0
  • release notes: https://gitlab.com/man-db/man-db/-/releases/2.13.0

• sys-apps/man-pages: [DEV]

  • still at 6.06
  • fixed tar invocation

• sys-apps/nvme-cli: [PROD] [DEV]

  • from 2.9.1 to 2.10.2
  • unstable on arm64, so added accept keywords to overlay profiles
  • added USE=pdc, disabled
  • bumped dependency on sys-libs/libnvme to >=1.10
  • release notes: https://github.com/linux-nvme/nvme-cli/releases/tag/v2.10.2 https://github.com/linux-nvme/nvme-cli/releases/tag/v2.10.1 https://github.com/linux-nvme/nvme-cli/releases/tag/v2.10

• sys-apps/pkgcore:

  • from 0.12.27 to 0.12.28
  • dropped our user patch, as it's included in the new version
  • release notes: https://github.com/pkgcore/pkgcore/releases/tag/v0.12.28

• sys-apps/sed: [PROD] [DEV]

  • still at 4.9-r1
  • fixed prefix build

• sys-apps/usbutils: [PROD] [DEV]

  • still at 017
  • bumped python compat to 3.10..13

• sys-block/open-iscsi: [PROD] [DEV]

  • from 2.1.10 to 2.1.10-r1
  • unstable on arm64, so added accept keywords to overlay profiles
  • fixed handling of initiatorname.iscsi
    • this allows us to drop an install mask

• sys-boot/gnu-efi:

  • still at 3.0.18-r3
  • fixed issues with using wrong objcopy

• sys-boot/grub:

  • from 2.12-r4 to 2.12-r5
  • enabled USE=device-mapper by default, disabled it in overlay profiles
    • it is normally needed for LUKS or LVM volume detection
  • implemented USE=secureboot via grub-mkstandalone
    • it's a noop when cross-compiling

• sys-devel/binutils: [DEV]

  • from 2.42-r1 to 2.42-r2
  • bumped patchset version from 3 to 6
    • no idea what has changed, the log is rather opaque and there is no versioning in the git repo
    • https://gitweb.gentoo.org/proj/toolchain/binutils-patches.git/log/
  • added printing errors when binutils-config fails

• sys-devel/binutils-config: [PROD] [DEV]

  • from 5.5 to 5.5.2
  • unstable on arm64, so added accept keywords to overlay profiles
  • release notes: https://gitweb.gentoo.org/proj/binutils-config.git/log/?h=v5.5.2

• sys-devel/gcc: [PROD] [DEV]

  • still at 13.3.1_p20240614
  • bumped some patch bundle version

• sys-devel/gettext: [PROD] [DEV]

  • from 0.22.4 to 0.22.5
  • unstable on arm64, so added accept keywords to overlay profiles
  • release notes: https://savannah.gnu.org/news/?id=10597

• sys-devel/gnuconfig: [DEV]

  • from 20240101 to 20240728
  • release notes: https://git.savannah.gnu.org/cgit/config.git/log/?id=00b15927496058d23e6258a28d8996f87cf1f191

• sys-firmware/intel-microcode: [PROD] [DEV]

  • from 20240813_p20240815 to 20240910_p20240915
  • release notes: https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20240910

• sys-fs/btrfs-progs: [PROD] [DEV]

  • from 6.9.2 to 6.10.1
  • unstable on arm64, so added accept keywords to overlay profiles
  • fixed tar invocation
  • release notes: https://github.com/kdave/btrfs-progs/blob/v6.10.1/CHANGES#L26-L38 https://github.com/kdave/btrfs-progs/blob/v6.10/CHANGES

• sys-fs/cryptsetup: [PROD] [DEV]

  • from 2.7.2 to 2.7.5
  • gcrypt backend now works for static builds
  • release notes: https://gitlab.com/cryptsetup/cryptsetup/-/blob/v2.7.5/docs/v2.7.5-ReleaseNotes https://gitlab.com/cryptsetup/cryptsetup/-/blob/v2.7.4/docs/v2.7.4-ReleaseNotes https://gitlab.com/cryptsetup/cryptsetup/-/blob/v2.7.3/docs/v2.7.3-ReleaseNotes

• sys-fs/quota: [PROD] [DEV]

  • from 4.09 to 4.09-r1
  • unstable on arm64, so added accept keywords to overlay profiles
  • added patch for building on musl

• sys-libs/binutils-libs: [PROD] [DEV]

  • from 2.42-r1 to 2.42-r2
  • bumped patchset version from 3 to 6
    • no idea what has changed, the log is rather opaque and there is no versioning in the git repo
    • https://gitweb.gentoo.org/proj/toolchain/binutils-patches.git/log/

• sys-libs/cracklib: [PROD] [DEV]

  • from 2.9.11 to 2.10.2
  • bumped python version to 3.10..13
  • unstable on arm64, so added accept keywords to overlay profiles
  • release notes: https://github.com/cracklib/cracklib/releases/tag/v2.10.2 https://github.com/cracklib/cracklib/releases/tag/v2.10.1 https://github.com/cracklib/cracklib/releases/tag/v2.10.0

• sys-libs/efivar: [PROD] [DEV]

  • from 38 to 39-r1
  • EAPI 8
  • unstable on arm64, so added accept keywords to overlay profiles
  • dropped our user patch - it's already a part of the update
  • release notes: https://github.com/rhboot/efivar/releases/tag/39

• sys-libs/libnvme: [PROD] [DEV]

  • from 1.9 to 1.10
  • bumped python compat to 3.10..13
  • release notes: https://github.com/linux-nvme/libnvme/releases/tag/v1.10

• sys-libs/liburing: [PROD] [DEV]

  • from 2.3-r4 to 2.7-r1
  • release notes: https://git.kernel.dk/cgit/liburing/tree/CHANGELOG?h=liburing-2.7 https://git.kernel.dk/cgit/liburing/tree/CHANGELOG?h=liburing-2.6 https://git.kernel.dk/cgit/liburing/tree/CHANGELOG?h=liburing-2.5 https://git.kernel.dk/cgit/liburing/tree/CHANGELOG?h=liburing-2.4

• sys-libs/libxcrypt: [PROD] [DEV]

  • still at 4.4.36-r3
  • bumped python compat to 3.10..13

• sys-libs/readline: [PROD] [DEV]

  • from 8.2_p10 to 8.2_p13
  • unstable on arm64, so added accept keywords to overlay profiles

• virtual/perl-Data-Dumper:

  • still at 2.189.0
  • became stable, dropped accept keywords from overlay profiles

• virtual/perl-Encode:

  • still at 3.210.0-r1
  • became stable, dropped accept keywords from overlay profiles

• virtual/perl-Exporter:

  • still at 5.780.0
  • became stable, dropped accept keywords from overlay profiles

• virtual/perl-File-Spec:

  • still at 3.900.0
  • became stable, dropped accept keywords from overlay profiles

• virtual/perl-Getopt-Long:

  • still at 2.570.0-r1
  • became stable, dropped accept keywords from overlay profiles

• virtual/perl-IO:

  • still at 1.550.0
  • became stable, dropped accept keywords from overlay profiles

--

• changelog
• image diff

[krnowak]

CI passed.

[github-actions]

Build action triggered: https://github.com/flatcar/scripts/actions/runs/11346961771