[PATCH] core202: Ship coreutils

[PATCH] core202: Ship coreutils

[Adolf Belka]

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 config/rootfiles/core/202/filelists/coreutils | 1 +
 1 file changed, 1 insertion(+)
 create mode 120000 config/rootfiles/core/202/filelists/coreutils

diff --git a/config/rootfiles/core/202/filelists/coreutils b/config/rootfiles/core/202/filelists/coreutils
new file mode 120000
index 000000000..7351ed2cf
--- /dev/null
+++ b/config/rootfiles/core/202/filelists/coreutils
@@ -0,0 +1 @@
+../../../common/coreutils
\ No newline at end of file
-- 
2.54.0

[PATCH] core202: Ship glib

[Adolf Belka]

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 config/rootfiles/core/202/filelists/glib | 1 +
 1 file changed, 1 insertion(+)
 create mode 120000 config/rootfiles/core/202/filelists/glib

diff --git a/config/rootfiles/core/202/filelists/glib b/config/rootfiles/core/202/filelists/glib
new file mode 120000
index 000000000..44665746a
--- /dev/null
+++ b/config/rootfiles/core/202/filelists/glib
@@ -0,0 +1 @@
+../../../common/glib
\ No newline at end of file
-- 
2.54.0

[PATCH] core202: Ship hwdata

[Adolf Belka]

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 config/rootfiles/core/202/filelists/hwdata | 1 +
 1 file changed, 1 insertion(+)
 create mode 120000 config/rootfiles/core/202/filelists/hwdata

diff --git a/config/rootfiles/core/202/filelists/hwdata b/config/rootfiles/core/202/filelists/hwdata
new file mode 120000
index 000000000..ced911666
--- /dev/null
+++ b/config/rootfiles/core/202/filelists/hwdata
@@ -0,0 +1 @@
+../../../common/hwdata
\ No newline at end of file
-- 
2.54.0

[PATCH] core202: Ship iproute2

[Adolf Belka]

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 config/rootfiles/core/202/filelists/iproute2 | 1 +
 1 file changed, 1 insertion(+)
 create mode 120000 config/rootfiles/core/202/filelists/iproute2

diff --git a/config/rootfiles/core/202/filelists/iproute2 b/config/rootfiles/core/202/filelists/iproute2
new file mode 120000
index 000000000..05f0f71fb
--- /dev/null
+++ b/config/rootfiles/core/202/filelists/iproute2
@@ -0,0 +1 @@
+../../../common/iproute2
\ No newline at end of file
-- 
2.54.0

[PATCH] core202: Ship libcap

[Adolf Belka]

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 config/rootfiles/core/202/filelists/libcap | 1 +
 1 file changed, 1 insertion(+)
 create mode 120000 config/rootfiles/core/202/filelists/libcap

diff --git a/config/rootfiles/core/202/filelists/libcap b/config/rootfiles/core/202/filelists/libcap
new file mode 120000
index 000000000..ed67d950a
--- /dev/null
+++ b/config/rootfiles/core/202/filelists/libcap
@@ -0,0 +1 @@
+../../../common/libcap
\ No newline at end of file
-- 
2.54.0

[PATCH] core202: Ship libgcrypt

[Adolf Belka]

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 config/rootfiles/core/202/filelists/libgcrypt | 1 +
 1 file changed, 1 insertion(+)
 create mode 120000 config/rootfiles/core/202/filelists/libgcrypt

diff --git a/config/rootfiles/core/202/filelists/libgcrypt b/config/rootfiles/core/202/filelists/libgcrypt
new file mode 120000
index 000000000..2df12a20e
--- /dev/null
+++ b/config/rootfiles/core/202/filelists/libgcrypt
@@ -0,0 +1 @@
+../../../common/libgcrypt
\ No newline at end of file
-- 
2.54.0

[PATCH] core202: Ship libjpeg

[Adolf Belka]

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 config/rootfiles/core/202/filelists/libjpeg | 1 +
 1 file changed, 1 insertion(+)
 create mode 120000 config/rootfiles/core/202/filelists/libjpeg

diff --git a/config/rootfiles/core/202/filelists/libjpeg b/config/rootfiles/core/202/filelists/libjpeg
new file mode 120000
index 000000000..3b1a782fb
--- /dev/null
+++ b/config/rootfiles/core/202/filelists/libjpeg
@@ -0,0 +1 @@
+../../../common/libjpeg
\ No newline at end of file
-- 
2.54.0

[PATCH] core202: Ship libxml2

[Adolf Belka]

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 config/rootfiles/core/202/filelists/libxml2 | 1 +
 1 file changed, 1 insertion(+)
 create mode 120000 config/rootfiles/core/202/filelists/libxml2

diff --git a/config/rootfiles/core/202/filelists/libxml2 b/config/rootfiles/core/202/filelists/libxml2
new file mode 120000
index 000000000..242e69fa3
--- /dev/null
+++ b/config/rootfiles/core/202/filelists/libxml2
@@ -0,0 +1 @@
+../../../common/libxml2
\ No newline at end of file
-- 
2.54.0

[PATCH] core202: Ship parted

[Adolf Belka]

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 config/rootfiles/core/202/filelists/parted | 1 +
 1 file changed, 1 insertion(+)
 create mode 120000 config/rootfiles/core/202/filelists/parted

diff --git a/config/rootfiles/core/202/filelists/parted b/config/rootfiles/core/202/filelists/parted
new file mode 120000
index 000000000..89195d8e8
--- /dev/null
+++ b/config/rootfiles/core/202/filelists/parted
@@ -0,0 +1 @@
+../../../common/parted
\ No newline at end of file
-- 
2.54.0

[PATCH] core202: Ship texinfo

[Adolf Belka]

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 config/rootfiles/core/202/filelists/texinfo | 1 +
 1 file changed, 1 insertion(+)
 create mode 120000 config/rootfiles/core/202/filelists/texinfo

diff --git a/config/rootfiles/core/202/filelists/texinfo b/config/rootfiles/core/202/filelists/texinfo
new file mode 120000
index 000000000..fa9df0257
--- /dev/null
+++ b/config/rootfiles/core/202/filelists/texinfo
@@ -0,0 +1 @@
+../../../common/texinfo
\ No newline at end of file
-- 
2.54.0

[PATCH] coreutils: Update to version 9.11

[Adolf Belka]

- Update from version 9.10 to 9.11
- No change to rootfile
- Changelog
    9.11
Bug fixes
  'dd' now always diagnoses partial writes correctly upon write failure.
   Previously it may have indicated that only full writes were performed.
   [This bug was present in "the beginning".]
  'fold' will no longer truncate output when encountering 0xFF bytes.
   [bug introduced in coreutils-9.8]
  'fold' is again responsive to its input.  Previously it would have delayed
   processing until 256KiB was read from the input.
   [bug introduced in coreutils-9.8]
  'kill --help' now has links to valid anchors in the html manual.
   [bug introduced in coreutils-9.10]
  When configured with --enable-systemd, the commands 'pinky',
   'uptime', 'users', and 'who' no longer consider the systemd session
   classes 'greeter', 'lock-screen', 'background', 'background-light',
   and 'none' to be users.
   [bug introduced in coreutils-9.4]
  'pwd' on ancient systems will no longer overflow a buffer
   when operating in deep paths longer than twice the system PATH_MAX.
   [bug introduced in coreutils-9.6]
  'stat --printf=%%N' no longer performs unnecessary checks of the QUOTING_STYLE
   environment variable.
   [bug introduced in coreutils-8.26]
  'timeout' no longer exits abruptly when its parent is the init process, e.g.,
   when started by the entrypoint of a container.
   [bug introduced in coreutils-9.10]
New Features
  'cut' now supports multi-byte input and delimiters.  Consequently
   the -c option is now honored, and no longer an alias for -b, and
   the -n option is now honored, and no longer ignored.
   Also the -d option supports multi-byte delimiters.
  'cut' adds new options for better compatibility:
   The -w,--whitespace-delimited option was added to support blank aligned fields
   and for better compatibility with FreeBSD/macOS.
   The -O option was added as an alias for the --output-delimiter option,
   for better compatibility with busybox/toybox.
   The -F option was added as an alias for -w -O ' '
   for better compatibility with busybox/toybox.
  'date --date' now parses dot delimited dd.mm.yy format common in Europe.
   This is in addition to the already supported mm/dd/yy and yy-mm-dd formats.
Changes in behavior
  'cksum --check' now uses shell quoting when required, to more robustly
   escape file names output in diagnostics.
   This also affects md5sum, sha*sum, and b2sum.
Improvements
  'cat' now uses zero-copy I/O on Linux when appropriate, to improve throughput.
   E.g., throughput improved 6x from 12.9GiB/s to 81.8GiB/s on a Power10 system.
  'df --local' recognises more file system types as remote.
   Specifically: autofs, ncpfs, smb, smb2, gfs, gfs2, userlandfs.
  'df' improves duplicate mount suppression, by checking each mount against
   all previously kept entries for the same device, not just the latest one.
  'expand' and 'unexpand' now support multi-byte characters.
  'groups' and 'id' will now exit sooner after a write error,
   which is significant when listing information for many users.
  'install' now allows the combination of the --compare and
   --preserve-timestamps options.
  'fold', 'join', 'numfmt', 'uniq' now use more consistent blank character
   determination on non GLIBC platforms.  For example \u3000 (ideographic space)
   will be considered a blank character on all platforms.
  'nl' now supports multi-byte --section-delimiter characters.
  'shuf -i' now operates up to two times faster on systems with unlocked stdio
   functions.
  'tac' will now exit sooner after a write error, which is significant when
   operating on a file with many lines.
  'timeout' now properly detects when it is reparented by a subreaper process on
   Linux instead of init, e.g., the 'systemd --user' process.
  'wc -l' now operates up to four and a half times faster on hosts that support
   Neon instructions.
  'wc -m' now operates up to 2.6 times faster on GLIBC when processing
   non-ASCII UTF-8 characters.
  'yes' now uses zero-copy I/O on Linux to significantly increase throughput.
   E.g., throughput improved 15x from 11.6GiB/s to 175GiB/s on a Power10 system.
Build-related
  ./configure --enable-single-binary=hardlinks is now supported on systems
   with dash as the system shell at /bin/sh.
   [issue introduced in coreutils-9.10]
  The test suite may have failed with a "Hangup" error if run non-interactively.
   [issue introduced in coreutils-9.10]

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 lfs/coreutils | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/lfs/coreutils b/lfs/coreutils
index 9b4270c37..862a7249d 100644
--- a/lfs/coreutils
+++ b/lfs/coreutils
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 9.10
+VER        = 9.11
 
 THISAPP    = coreutils-$(VER)
 DL_FILE    = $(THISAPP).tar.xz
@@ -56,7 +56,7 @@ objects =$(DL_FILE)
 
 $(DL_FILE)= $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 7f9f93afc996dea7b6ab412703b1706f40616ae4fee1eea9e5cad0f1e8e95b03df9570084a2703fa4b5bb1cb2eaf8bbe55368c0c7ff58af985b30d09227f9309
+$(DL_FILE)_BLAKE2 = bea602b60824724bddd53ef7a232292ddb99f9b940ebedc30bd42f9b2f3d4763e7ea6c1d76c556413261b8c0bba7b1adbb4a5f6619ff3c9bdbe80d05a12ebd86
 
 install : $(TARGET)
 
-- 
2.54.0

[PATCH] git: Update to version 2.54.0

[Adolf Belka]

- Update from version 2.53.0 to 2.54.0
- Update of rootfile
- Changelog
    2.54.0
UI, Workflows & Features
	"git add -p" and friends note what the current status of the hunk
	 being shown is.
	"git history" history rewriting (experimental) command has been
	 added.
	"git replay" is taught to drop commits that become empty (not the
	 ones that are empty in the original).
	The help text and the documentation for the "--expire" option of
	 "git worktree [list|prune]" have been improved.
	When "git show-index" is run outside a repository, it silently
	 defaults to SHA-1; the tool now warns when this happens.
	"git merge-file" can be run outside a repository, but it ignored
	 all configuration, even the per-user ones.  The command now uses
	 available configuration files to find its customization.
	"auto filter" logic for large-object promisor remote.
	"git rev-list" and friends learn "--maximal-only" to show only the
	 commits that are not reachable by other commits.
	Command line completion (in contrib/) update for
	 "stash import/export".
	"git repo info" learns "--keys" action to list known keys.
	Extend the alias configuration syntax to allow aliases using
	 characters outside ASCII alphanumeric (plus -).
	A signature on a commit that was GPG signed a long time ago ought to
	 be still valid after the key that was used to sign it has expired,
	 but we showed them in alarming red.
	"git subtree split --prefix=P <commit>" now checks the prefix P
	 against the tree of the (potentially quite different from the
	 current working tree) given commit.
	"git add -p" learned a new mode that allows the user to revisit a
	 file that was already dealt with.
	Allow the directory in which reference backends store their data to
	 be specified.
	"gitweb" has been taught to be mobile friendly.
	"git apply --directory=./un/../normalized/path" now normalizes the
	 given path before using it.
	"git maintenance" starts using the "geometric" strategy by default.
	"git config list" is taught to show the values interpreted for
	 specific type with "--type=<X>" option.
	"git add <submodule>" has been taught to honor
	 submodule.<name>.ignore that is set to "all" (and requires "git add
	 -f" to override it).
	Hook commands are now allowed to be defined (possibly centrally)
	 in the configuration files, and run multiple of them for the same
	 hook event.
	The way end-users can add their own "git <cmd>" subcommand by
	 storing "git-<cmd>" in a directory on their $PATH has not been
	 documented clearly, which has been corrected.
	"git send-email" learns to pass hostname/port to Authen::SASL
	 module.
	"git send-email" learns to support use of client-side certificates.
	"git send-email" has learned to be a bit more careful when it
	 accepts charset to use from the end-user, to avoid y (mistaken
	 yes when expecting a charset like UTF-8) and other nonsense.
	"git status" learned to show comparison between the current branch
	 and various other branches listed on status.compareBranches
	 configuration.
	"git repo structure" command learns to report maximum values on
	 various aspects of objects it inspects.
	"git rebase" learns "--trailer" option to drive the
	 interpret-trailers machinery.
	"git fast-import" learned to optionally replace signature on
	 commits whose signatures get invalidated due to replaying by
	 signing afresh.
	"git history" learned the "split" subcommand.
	The reference-transaction hook was taught to be triggered before
	 taking locks on references in the "preparing" phase.
	"git apply" now reports the name of the input file along with the
	 line number when it encounters a corrupt patch, and correctly
	 resets the line counter when processing multiple patch files.
	The HTTP transport learned to react to "429 Too Many Requests".
	"git repo info -h" and "git repo structure -h" limit their help output
	 to the part that is specific to the subcommand.
	"git format-patch --cover-letter" learns to use a simpler format
	 instead of the traditional shortlog format to list its commits with
	 a new --commit-list-format option and format.commitListFormat
	 configuration variable.
	git backfill learned to accept revision and pathspec arguments.
	"git replay" (experimental) learns, in addition to "pick" and
	 "replay", a new operating mode "revert".
	"git replay" now supports replaying down to the root commit.
	Handling of signed commits and tags in fast-import has been made more
	 configurable.
	"git config list" is the official way to spell "git config -l" and
	 "git config --list".  Use it to update the documentation.
Performance, Internal Implementation, Development Support etc.
	Avoid local submodule repository directory paths overlapping with
	 each other by encoding submodule names before using them as path
	 components.
	The string_list API gains a new helper, string_list_sort_u(), and
	 new unit tests to extend coverage.
	Improve set-up time of a perf test.
	ISO C23 redefines strchr and friends that traditionally took
	 a const pointer and returned a non-const pointer derived from it to
	 preserve constness (i.e., if you ask for a substring in a const
	 string, you get a const pointer to the substring).  Update code
	 paths that used non-const pointer to receive their results that did
	 not have to be non-const to adjust.
	Rename three functions around the commit_list data structure.
	Transaction to create objects (or not) is currently tied to the
	 repository, but in the future a repository can have multiple object
	 sources, which may have different transaction mechanisms.  Make the
	 odb transaction API per object source.
	"git merge-ours" is taught to work better in a sparse checkout.
	Allow recording process ID of the process that holds the lock next
	 to a lockfile for diagnosis.
	Reduce dependency on the_repository of xdiff-interface layer.
	Code clean-up to use the commit_stack API.
	"git diff --anchored=<text>" has been optimized.
	A CodingGuidelines update.
	Add process ancestry data to trace2 on macOS to match what we
	 already do on Linux and Windows.  Also adjust the way Windows
	 implementation reports this information to match the other two.
	A handful of places used refs_for_each_ref_in() API incorrectly,
	 which has been corrected.
	Some tests assumed "iconv" is available without honoring ICONV
	 prerequisite, which has been corrected.
	Revamp object enumeration API around odb.
	Additional tests were introduced to see the interaction with netrc
	 auth with auth failure on the http transport.
	A couple of bugs in use of flag bits around odb API has been
	 corrected, and the flag bits reordered.
	Plumb gitk/git-gui build and install procedure in meson based
	 builds.
	The code to accept shallow "git push" has been optimized.
	Simplify build procedure for oxskeychain (in contrib/).
	Fix dependency screw-up in meson-based builds.
	Wean the mailmap code off of the_repository dependency.
	API clean-up for the worktree subsystem.
	The last uses of the_repository in "tree-diff.c" have been
	 eradicated.
	Clean-up the code around "git repo info" command.
	Mark the merge-ort codebase to prevent more uses of the_repository
	 from getting added.
	The core.attributesfile is intended to be set per repository, but
	 was kept track of by a single global variable in-core, which has
	 been corrected by moving it to per-repository data structure.
	Use the hook API to replace ad-hoc invocation of hook scripts via
	 the run_command() API.
	Code refactoring around refs-for-each-* API functions.
	The parse-options API learned to notice an options[] array with
	 duplicated long options.
	 (merge 237e520d81 rs/parse-options-duplicated-long-options later to maint).
	The code to maintain mapping between object names in multiple hash
	 functions is being added, written in Rust.
	A bit of OIDmap API enhancement and cleanup.
	Move gitlab CI from macOS 14 images that are being deprecated.
	The object source API is getting restructured to allow plugging new
	 backends.
	Reduce dependence on the global the_hash_algo and the_repository
	 variables of wt-status code path.
	The way combined list-object filter options are parsed has been
	 revamped.
	Editorconfig filename patterns were specified incorrectly, making
	 many source files inside subdirectories unaffected, which has been
	 corrected.
	The run_command() API lost its implicit dependency on the singleton
	 the_repository instance.
	The unit test helper function was taught to use backslash
	 mnemonic notation for certain control characters like "\t", instead
	 of octal notation like "\011".
	Adjust test-lint to allow "sed -E" to use ERE in the patterns.
	Clar (unit testing framework) update from the upstream.
	Reduce system overhead "git upload-pack" spends on relaying "git
	 pack-objects" output to the "git fetch" running on the other end of
	 the connection.
	Add a coccinelle rule to break the build when "struct strbuf" gets
	 passed by value.
	Further work on incremental repacking using MIDX/bitmap
	The logic to count objects has been cleaned up.
	Tweak the build infrastructure by moving tools around.
	Uses of prio_queue as a LIFO stack of commits have been written
	 with commit_stack.
	The cleanup of remaining bitmaps in "ahead_behind()" has been
	 simplified.
	split-index.c has been updated to not use the global the_repository
	 and the_hash_algo variables.
	The unsigned integer that is used as a bitset to specify the kind
	 of branches interpret_branch_name() function has been changed to
	 use a dedicated enum type.
	Various updates to contrib/diff-highlight, including documentation
	 updates, test improvements, and color configuration handling.
	Code paths that loop over another array to push each element into a
	 strvec have been rewritten to use strvec_pushv() instead.
	In case homebrew breaks REG_ENHANCED again, leave an in-code comment
	 to suggest use of our replacement regex as a workaround.
	MinGW build updates.
	The way dash 0.5.13 handles non-ASCII contents in here-doc
	 is buggy and breaks our existing tests, which unfortunately
	 have been rewritten to avoid triggering the bug.
	Object name handling (disambiguation and abbreviation) has been
	 refactored to be backend-generic, moving logic into the respective
	 object database backends.
	pack-objects’s --stdin-packs=follow mode learns to handle
	 excluded-but-open packs.
	A few code paths that spawned child processes for network
	 connection weren’t wait(2)ing for their children and letting "init"
	 reap them instead; they have been tightened.
	Adjust the codebase for C23 that changes functions like strchr()
	 that discarded constness when they return a pointer into a const
	 string to preserve constness.
	A handful of inappropriate uses of the_repository have been
	 rewritten to use the right repository structure instance in the
	 read-cache.c codepath.
	Internals of "git fsck" have been refactored to not depend on the
	 global the_repository variable.
	Reduce dependency on the_repository in add-patch.c file.
	The way the "git log -L<range>:<file>" feature is bolted onto the
	 log/diff machinery is being reworked a bit to make the feature
	 compatible with more diff options, like -S/G.
	Further work to adjust the codebase for C23 that changes functions
	 like strchr() that discarded constness when they return a pointer into
	 a const string to preserve constness.
	"git rev-list --maximal-only" has been optimized by borrowing the
	 logic used by "git show-branch --independent", which computes the
	 same kind of information much more efficiently.
Fixes since v2.53
	HTTP transport failed to authenticate in some code paths, which has
	 been corrected.
	 (merge ed0f7a62f7 ap/http-probe-rpc-use-auth later to maint).
	The computation of column width made by "git diff --stat" was
	 confused when pathnames contain non-ASCII characters.
	 (merge 04f5d95ef7 lp/diff-stat-utf8-display-width-fix later to maint).
	The "-z" and "--max-depth" documentation (and implementation of
	 "-z") in the "git last-modified" command have been updated.
	 (merge 9dcc09bed1 tc/last-modified-options-cleanup later to maint).
	A handful of code paths that started using batched ref update API
	 (after Git 2.51 or so) lost detailed error output, which have been
	 corrected.
	 (merge eff9299eac kn/ref-batch-output-error-reporting-fix later to maint).
	"git blame --ignore-revs=…​ --color-lines" did not account for
	 ignored revisions passing blame to the same commit an adjacent line
	 gets blamed for.
	 (merge d519082d4e rs/blame-ignore-colors-fix later to maint).
	Coccinelle rules update.
	 (merge 60614838a4 tc/memzero-array later to maint).
	Giving "git last-modified" a tree (not a commit-ish) died an
	 uncontrolled death, which has been corrected.
	 (merge 525ef52301 tc/last-modified-not-a-tree later to maint).
	Test contrib/ things in CI to catch breakages before they enter the
	 "next" branch.
	 (merge c591c3ceff jc/ci-test-contrib-too later to maint).
	A handful of documentation pages have been modernized to use the
	 "synopsis" style.
	 (merge a34d1d53a6 ja/doc-synopsis-style-even-more later to maint).
	Small clean-up of xdiff library to remove unnecessary data
	 duplication.
	 (merge 5086213bd2 pw/xdiff-cleanups later to maint).
	Update sample commit-msg hook to complain when a log message has
	 material mailinfo considers the end of log message in the middle.
	 (merge 83804c361b pw/commit-msg-sample-hook later to maint).
	"git pack-objects --stdin-packs" with "--exclude-promisor-objects"
	 fetched objects that are promised, which was not wanted.  This has
	 been fixed.
	 (merge f4eff7116d ps/pack-concat-wo-backfill later to maint).
	"git switch <name>", in an attempt to create a local branch <name>
	 after a remote tracking branch of the same name gave an advice
	 message to disambiguate using "git checkout", which has been
	 updated to use "git switch".
	 (merge 12fee11f21 jc/checkout-switch-restore later to maint).
	It does not make much sense to apply the "incomplete-line"
	 whitespace rule to symbolic links, whose contents almost always
	 lack the final newline.  "git apply" and "git diff" are now taught
	 to exclude them for a change to symbolic links.
	 (merge 6a41481c6d jc/whitespace-incomplete-line later to maint).
	"git format-patch --from=<me>" did not honor the command line
	 option when writing out the cover letter, which has been corrected.
	Update build procedure for mergetool documentation in meson-based builds.
	 (merge 58e4eeeeb5 pw/meson-doc-mergetool later to maint).
	An earlier attempt to optimize "git subtree" discarded too much
	 relevant histories, which has been corrected.
	A prefetch call can be triggered to access a stale diff_queue entry
	 after diffcore-break breaks a filepair into two and freed the
	 original entry that is no longer used, leading to a segfault, which
	 has been corrected.
	 (merge 2d88ab078d hy/diff-lazy-fetch-with-break-fix later to maint).
	"git fetch --deepen" that tries to go beyond merged branch used to
	 get confused where the updated shallow points are, which has been
	 corrected.
	 (merge 3ef68ff40e sp/shallow-deepen-relative-fix later to maint).
	"fsck" iterates over packfiles and its access to pack data caused
	 the list to be permuted, which caused it to loop forever; the code
	 to access pack data by "fsck" has been updated to avoid this.
	 (merge 13eb65d366 ps/fsck-stream-from-the-right-object-instance later to maint).
	"git log --graph --stat" did not count the display width of colored
	 graph part of its own output correctly, which has been corrected.
	 (merge 064b869efc lp/diff-stat-utf8-display-width-fix later to maint).
	The configuration variable format.noprefix did not behave as a
	 proper boolean variable, which has now been fixed and documented.
	 (merge ea3a62c40e kh/format-patch-noprefix-is-boolean later to maint).
	CI fix.
	 (merge eb35167dd4 ps/ci-reduce-gitlab-envsize later to maint).
	"git diff --no-index --find-object=<object-name>" outside a
	 repository of course wouldn’t be able to find the object and died
	 while parsing the command line.  The command is made to die in a
	 bit more user-friendly way.
	 (merge b0ddc7947c mm/diff-no-index-find-object later to maint).
	Fix typo-induced breakages in fsmonitor-watchman sample hook.
	 (merge 41366e4677 pt/fsmonitor-watchman-sample-fix later to maint).
	"git for-each-repo" started from a secondary worktree did not work
	 as expected, which has been corrected.
	 (merge e87493b9b4 ds/for-each-repo-w-worktree later to maint).
	The construct test "$(command)" = expectation loses the exit
	 status from the command, which has been fixed by breaking up the
	 statement into pieces.
	 (merge d3edca979a fp/t3310-unhide-git-failures later to maint).
	While discovering a ".git" directory, the code treats any stat()
	 failure as a sign that a filesystem entity .git does not exist
	 there, and ignores ".git" that is not a "gitdir" file or a
	 directory.  The code has been tightened to notice and report
	 filesystem corruption better.
	 (merge 1dd27bfbfd ty/setup-error-tightening later to maint).
	Plug a few leaks where mmap’ed memory regions are not unmapped.
	 (merge a8a69bbb64 jk/unleak-mmap later to maint).
	A test now uses the symbolic constant $ZERO_OID instead of 40 "0" to
	 work better with SHA-256 as well as SHA-1.
	 (merge 30310f3cc4 ss/t3200-test-zero-oid later to maint).
	Instead of hardcoded origin, use the configured default remote
	 when fetching from submodules.
	 (merge 3b5fb32da8 ng/submodule-default-remote later to maint).
	The code in "git help" that shows configuration items in sorted
	 order was awkwardly organized and prone to bugs.
	"imap-send" used to use functions whose use is going to be removed
	 with OpenSSL 4.0; rewrite them using public API that has been
	 available since OpenSSL 1.1 since 2016 or so.
	 (merge 6392a0b75d bb/imap-send-openssl-4.0-prep later to maint).
	Fix an example in the user-manual.
	 (merge 5514f14617 gj/user-manual-fix-grep-example later to maint).
	The final clean-up phase of the diff output could turn the result of
	 histogram diff algorithm suboptimal, which has been corrected.
	 (merge e417277ae9 yc/histogram-hunk-shift-fix later to maint).
	"git diff -U<num>" was too lenient in its command line parsing and
	 took an empty string as a valid <num>.
	 (merge 4f6a803aba ty/doc-diff-u-wo-number later to maint).
	The handling of the incomplete lines at the end by "git
	 diff-highlight" has been fixed.
	merge-file --object-id used to trigger a BUG when run in a linked
	 worktree, which has been fixed.
	 (merge 57246b7c62 mr/merge-file-object-id-worktree-fix later to maint).
	"git apply -p<n>" parses <n> more carefully now.
	 (merge d05d84c5f5 mf/apply-p-no-atoi later to maint).
	A test to run a .bat file with whitespaces in the name with arguments
	 with whitespaces in them was flaky in that sometimes it got killed
	 before it produced expected side effects, which has been rewritten to
	 make it more robust.
	 (merge 3ad4921838 jk/t0061-bat-test-update later to maint).
	"git ls-remote +refs/tags/:refs/tags/ https://…​" run outside a
	 repository would dereference a NULL while trying to see if the given
	 refspec is a single-object refspec, which has been corrected.
	 (merge 4e5dc601dd kj/refspec-parsing-outside-repository later to maint).
	Fix a regression in writing the commit-graph where commits with dates
	 exceeding 34 bits (beyond year 2514) could cause an underflow and
	 crash Git during the generation data overflow chunk writing.
	The value of a wrong pointer variable was referenced in an error
	 message that reported that it shouldn’t be NULL.
	 (merge 753ecf4205 yc/path-walk-fix-error-reporting later to maint).
	The check in "receive-pack" to prevent a checked out branch from
	 getting updated via updateInstead mechanism has been corrected.
	"git backfill" is capable of auto-detecting a sparsely checked out
	 working tree, which was broken.
	 (merge 339eba65a7 th/backfill-auto-detect-sparseness-fix later to maint).
	add_files_to_cache() used diff_files() to detect only the paths that
	 are different between the index and the working tree and add them,
	 which does not need rename detection, which interfered with unnecessary
	 conflicts.
	 (merge c0ce43376b ng/add-files-to-cache-wo-rename later to maint).
	Doc mark-up update for entries in the glossary with bulleted lists.
	 (merge a65cbd87ea jk/doc-markup-sub-list-indentation later to maint).
	CI dependency updates.
	 (merge 4bdb17e3a8 jc/ci-github-actions-use-checkout-v5 later to maint).
	Other code cleanup, docfix, build fix, etc.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 config/rootfiles/packages/git | 1 +
 lfs/git                       | 6 +++---
 2 files changed, 4 insertions(+), 3 deletions(-)

diff --git a/config/rootfiles/packages/git b/config/rootfiles/packages/git
index 3fb9dba6c..e39c7b1eb 100644
--- a/config/rootfiles/packages/git
+++ b/config/rootfiles/packages/git
@@ -76,6 +76,7 @@ usr/libexec/git-core/git-grep
 #usr/libexec/git-core/git-gui--askyesno
 usr/libexec/git-core/git-hash-object
 usr/libexec/git-core/git-help
+usr/libexec/git-core/git-history
 usr/libexec/git-core/git-hook
 usr/libexec/git-core/git-http-backend
 usr/libexec/git-core/git-http-fetch
diff --git a/lfs/git b/lfs/git
index 4822189ad..74a23d38a 100644
--- a/lfs/git
+++ b/lfs/git
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 2.53.0
+VER        = 2.54.0
 SUMMARY    = Fast, scalable, distributed revision control system
 
 THISAPP    = git-$(VER)
@@ -33,7 +33,7 @@ DL_FROM    = $(URL_IPFIRE)
 DIR_APP    = $(DIR_SRC)/$(THISAPP)
 TARGET     = $(DIR_INFO)/$(THISAPP)
 PROG       = git
-PAK_VER    = 41
+PAK_VER    = 42
 
 DEPS       = perl-Authen-SASL perl-Net-SMTP-SSL
 
@@ -47,7 +47,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = a23ccb2f793d37347e892f6094ad589510c93011a53fb2c14cdcbfbe6d87413edb4585a98253e4ca5124217f66ad783f4fa584f38dc25ffa34772da01dc45f02
+$(DL_FILE)_BLAKE2 = 68ee0623ff5a695a35dae2f31e3f410ebd4b6a8296c7c9fd03f53668878e9164b78ca82869c8a0719b3fae981f514f2022c45b39df7174b5e883348bdd269a82
 
 install : $(TARGET)
 
-- 
2.54.0

[PATCH] glib: Update to version 2.88.0

[Adolf Belka]

- Update from version 2.87.0 to 2.88.0
- Update of rootfile
- 3 CVE fixes in 2.87.3
- 3 CVE fixes in 2.87.1
- Changelog
    2.88.0
	* Bugs fixed:
	  - !5097 gslice: Factor out a size helper macro and stop using MAX in a public
	    header
    2.87.5
	* Brown paper bag release to attempt to fix the dist-job in CI; this caused it
	  to be impossible to build a release archive for 2.87.4
	* Bugs fixed:
	  - !5096 ci: Force a git clone and update the index when running dist-job
    2.87.4
	* Avoid installing broken symlinks as part of the test data for the gdatetime
	  tests (!5054, work by Alessandro Astone)
	* Fix `g_file_set_contents()` with non-ASCII filenames on Windows (#3873, work
	  by Lukas K.)
	* Bugs fixed:
	  - #3688 Documentation issue with g_slice_new and g_slice_new0 (Philip
	    Withnall)
	  - #3730 Unclear assertion failure message when `G_PARAM_CONSTRUCT` and
	    `G_PARAM_CONSTRUCT_ONLY` are both specified (depuc8)
	  - #3814 vs2019-arm64 CI fails with ninja error (Philip Withnall)
	  - #3873 g_file_set_contents broken on windows for non-ASCII filenames
	  - #3885 Documentation of g_file_info_get_is_backup() doesn’t define what a
	    backup file is (depuc8)
	  - #3897 GLocalFileInfo's set_symlink() is backwards (Philip Withnall)
	  - #3905 Memory leak in g_desktop_app_info_launch_uris_with_spawn (correctmost)
	  - !5030 gsocketconnection: Set an error when closed if no address is cached
	  - !5037 minor doc fixes
	  - !5047 i18n: Update and correction for Occitan
	  - !5048 ci: Install gi-docgen in the Fedora CI image
	  - !5049 Update Serbian translation
	  - !5050 Update Swedish translation
	  - !5051 Update French translation
	  - !5052 Update Bulgarian translation
	  - !5053 Update Romanian translation
	  - !5054 tests: Create unix_localtime root directory structure at runtime
	  - !5055 Update Chinese (China) translation
	  - !5056 Update Japanese translation
	  - !5057 Update Korean translation
	  - !5058 Update Georgian translation
	  - !5059 Update Ukrainian translation
	  - !5060 Update Lithuanian translation
	  - !5061 Update French translation
	  - !5062 Update Hungarian translation
	  - !5064 Update Portuguese translation
	  - !5065 Update Nepali translation
	  - !5066 i18n: Update for Occitan
	  - !5068 Update Turkish translation
	  - !5069 Update Brazilian Portuguese translation
	  - !5070 Update Galician translation
	  - !5071 Update Kazakh translation
	  - !5075 Update Polish translation
	  - !5076 Update Catalan translation
	  - !5077 Update Slovenian translation
	  - !5078 gio-tool-launch: Fix a filename leak
	  - !5080 Update Catalan translation
	  - !5081 Update Danish translation
	  - !5082 Update Polish translation
	  - !5084 Update British English translation
	  - !5085 Update Georgian translation
	  - !5087 Update Nepali translation
	  - !5088 tests: Fix a minor memory leak in the socket test
	  - !5089 ci: Drop workaround for GitLab submodule checkout bug
	  - !5090 Prevent iptosmessage test failures on FreeBSD and Hurd
	  - !5091 gobject: Disable new construct property check with G_DISABLE_CHECKS
	* Translation updates:
	  - Bulgarian (Alexander Alexandrov Shopov)
	  - Catalan (Victor Dargallo, Jordi Mas)
	  - Chinese (China) (luming zh)
	  - Danish (Ask Hjorth Larsen)
	  - English (United Kingdom) (Bruce Cowan)
	  - French (Guillaume Bernard)
	  - Galician (Francisco Diéguez Souto)
	  - Georgian (Ekaterine Papava)
	  - Hungarian (Balázs Úr)
	  - Japanese (Makoto Sakaguchi)
	  - Kazakh (Baurzhan Muftakhidinov)
	  - Korean (Changwoo Ryu)
	  - Lithuanian (Aurimas Aurimas Černius)
	  - Nepali (Pawan Chitrakar)
	  - Occitan (post 1500) (Mejans)
	  - Polish (Victoria)
	  - Portuguese (Hugo Carvalho)
	  - Portuguese (Brazil) (Rafael Fontenelle)
	  - Romanian (Antonio Marin)
	  - Serbian (Miloš Popović)
	  - Slovenian (Martin)
	  - Swedish (Anders Jonsson)
	  - Turkish (Emin Tufan Çetin)
	  - Ukrainian (Yuri Chornoivan)
    2.87.3
	* Improved support for `GNotification` on Windows (#3867, #3869, work by
	  Oscar Pernia Moreno)
	* Fix module lookups via `GModule` on Cygwin (#3741, work by Ailin Nemui)
	* Fix local timezone lookup with nested symlinks in `/etc/localtime` (#3816,
	  work by Alessandro Astone)
	* Fix ordering and sequential consistency of gatomic memory barriers on MSVC
	  and fallback GCC code paths (#3829, #3852, work by Luca Bacci)
	* Fix various integer overflow bugs (#3870, #3871, #3872, CVE-2026-1484,
	  CVE-2026-1485, CVE-2026-1489, work by Marco Trevisan)
	* Add `GSocketControlMessage` subclasses for receiving `IP_TOS` and
	  `IPV6_TCLASS` (!4846, work by Jakub Adam)
	* Support polling more than 1024 FDs on macOS (!4953, work by Ihar Hrachyshka)
	* Remove platform-specific backward compatibility from GLib-2.0 as it’s
	  impossible to support (#3839, !4881, work by Marco Trevisan)
	* Improve introspection annotations for delimiters on `g_strsplit_set()` (this
	  may require changes in introspection bindings)
	* Basic support for building and running some functionality on tvOS and watchOS
	  (!4992, work by Nirbheek Chauhan)
	* Add `g_get_monotonic_time()` variant with nanosecond precision (!5004, work
	  by Benjamin Otte)
	* Bugs fixed:
	  - #3628 Add test suite for gdbus tool (Philip Withnall)
	  - #3741 GModule incorrectly searches for cyg....so instead of cyg....dll on
	    Cygwin (Ailin Nemui)
	  - #3816 Local timezone wrongly considered to be UTC if timezone file in
	    /usr/share/zoneinfo is a symlink (Alessandro Astone)
	  - #3829 [RFC] gatomic: Memory barriers should be reversed (Luca Bacci)
	  - #3839 Broken Unix/Win32 specific GIRs
	  - #3852 MSVC and GCC-fallback atomics are not sequentially consistent (Luca
	    Bacci)
	  - #3863 Iterating over a short (preallocated) GVariant bytestring invalidly
	    refs a NULL GBytes (Christian Hergert)
	  - #3865 callable-info/native-address test fails on big endian (Alessandro
	    Astone)
	  - #3867 win32: Notifications without body won't show up
	  - #3869 gnotification-win32: Re-initialize tray icon if `explorer.exe` got
	    restarted
	  - #3870 (CVE-2026-1484) (YWH-PGM9867-168) Integer Overflow -> Buffer Underflow
	    on Glib through glib/gbase64.c via g_base64_encode_close() leads to OOB
	    Write (Marco Trevisan (Treviño))
	  - #3871 (CVE-2026-1485) (#YWH-PGM9867-169) Buffer underflow on Glib through
	    gio/gcontenttype-fdo.c via parse_header() lead to OOB Read/Write (Marco
	    Trevisan (Treviño))
	  - #3872 (CVE-2026-1489) (#YWH-PGM9867-171) Integer Overflow on Glib through
	    glib/guniprop.c via output_marks() lead to OOB Write in
	    glib/gutf8.c:g_unichar_to_utf8() (Marco Trevisan (Treviño))
	  - #3877 hash test failing randomly on MSYS2 (Luca Bacci)
	  - #3880 Integer overflow in gio-launch-desktop from over-long environment
	    variables (Philip Withnall)
	  - #3881 Integer overflow in g_resource_find_overlay() from over-long
	    environment variables (Philip Withnall)
	  - #3883 Integer overflow in `g_path_get_basename()` when passed an extremely
	    long path (length ≈SSIZE_MAX) (Philip Withnall)
	  - #3886 Crash in gdbus-tool on invalid --method argument format (Philip
	    Withnall)
	  - #3895 date_time_lookup_era unsafely caches `setlocale` pointer (Philip
	    Withnall)
	  - !4846 gio: Add GSocketControlMessage subclasses for receiving IP_TOS and
	    IPV6_TCLASS
	  - !4953 darwin: Support g_poll:maxfd >= FD_SETSIZE
	  - !4957 gstrfuncs: Annotate g_strsplit_set() as taking a byte array of
	    delimiters
	  - !4966 gio-tool-{copy,move}: Fix incorrect transfer rate calculation and
	    improve visualization
	  - !4968 markup: Better error reporting
	  - !4970 gutf8: Clarify docs about negative return values
	  - !4971 gutf8: Use size_t internally for some length calculations
	  - !4976 docs: Fix a typo and specify a codeblock is C
	  - !4977 gobject: Add nullable annotation to g_weak_ref_get return value
	  - !4982 markup: Initialize tag positions
	  - !4985 ci/fedora, glib/casemap: Add tests for the Azerbaijani cases
	  - !4987 giomodule: Simplify macro usage for getting the giomodule dir, don't
	    use it on iOS
	  - !4991 gio/gdatainputstream: Mark bytes as potentially unused
	  - !4992 Disable or stub out fork/execv* usage when targeting tvOS and watchOS
	  - !4993 Windows: Add test-profile
	  - !4996 Fix some small regressions in the iOS build
	  - !4997 meson: Add guesses for compute_int to speed up cross-compile setup
	  - !5002 Update Lithuanian translation
	  - !5004 Add g_get_monotonic_time() variant with nanosecond precision
	  - !5006 gfileutils: Fix a regression in `g_path_get_basename()` for plain
	    files
	  - !5008 Update Swedish translation
	  - !5009 Update Kazakh translation
	  - !5011 Update Romanian translation
	  - !5012 Compilation fixes for CLangCL and older MSVC
	  - !5013 Update Czech translation
	  - !5014 Update Russian translation
	  - !5015 GApplication: make send_notification / withdraw_notification thread-
	    safe
	  - !5018 Update Ukrainian translation
	  - !5020 Update Romanian translation
	  - !5021 Update Lithuanian translation
	  - !5023 Update Greek translation
	  - !5024 Update Chinese (China) translation
	  - !5025 Update Slovenian translation
	  - !5026 Update Brazilian Portuguese translation
	  - !5027 Update Basque translation
	  - !5028 gvalue: Update default terminology to initial
	  - !5029 Update Bulgarian translation
	  - !5031 Update Galician translation
	  - !5032 Update Hungarian translation
	  - !5034 Fix const qualifiers where discarded
	  - !5036 Address more size types issues
	  - !5038 Update Kazakh translation
	  - !5039 Update Catalan translation
	  - !5040 gsettings-tool: Fix leaks when running set commands
	  - !5041 gsettings-tool: Fix leaks when specifying invalid schemas
	  - !5042 Update Spanish translation
	* Translation updates:
	  - Basque (Asier Saratsua Garmendia)
	  - Bulgarian (Alexander Alexandrov Shopov)
	  - Catalan (Victor Dargallo)
	  - Chinese (China) (luming zh)
	  - Czech (Daniel Rusek)
	  - Galician (Fran Diéguez)
	  - Greek, Modern (1453-) (Efstathios Iosifidis)
	  - Hungarian (Balázs Úr)
	  - Kazakh (Baurzhan Muftakhidinov)
	  - Lithuanian (Aurimas Aurimas Černius)
	  - Portuguese (Brazil) (Juliano de Souza Camargo)
	  - Romanian (Antonio Marin)
	  - Russian (Artur S0)
	  - Slovenian (Martin)
	  - Spanish (Daniel Mustieles)
	  - Swedish (Anders Jonsson)
	  - Ukrainian (Yuri Chornoivan)
    2.87.2
	* Add initial support for `GNotification` on Windows (#3857, work by
	  Oscar Pernia Moreno)
	* Bugs fixed:
	  - #3850 g_strsplit_set docs are misleading (Matthias Clasen)
	  - #3857 win32: Add support for notifications using Shell_NotifyIcon API
	  - #3858 glib-compile-resources: Incorrect compiler detection on Windows when
	    building GTK causes a DoS (L. E. Segovia)
	  - #3863 Iterating over a short (preallocated) GVariant bytestring invalidly
	    refs a NULL GBytes (Christian Hergert)
	  - #3864 gir-tracker-bot posting diffs against too-recent-`main` (Marco
	    Trevisan (Treviño))
	  - #3867 win32: Notifications without body won't show up
	  - !4918 gio/unixmounts: use bsearch() to check for set inclusion
	  - !4949 gdesktopappinfo: Fix -Wsign-conversion warnings
	  - !4950 gobject: Fix -Wshorten-64-to-32 warnings and enable warning flag
	  - !4958 gtestutils: Avoid pointless logging string handling in gtestutils
	  - !4959 glib-unix: Implement g_unix_fd_query_path for Cygwin
	  - !4964 gio: Fix some -Wsign-conversion warnings
	  - !4965 gmodule: Enable -Wshorten-64-to-32 warnings for gmodule
	  - !4967 Fixup unicode 17
    2.87.1
	* Several low-risk CVE fixes (#3827, #3834, #3845)
	* Fix return type of `gi_callable_info_get_closure_native_address()` (#3859,
	  work by Philip Chimento)
	* Tweak thread pool handling for `GTask` threads to prevent stalls (#3840, work
	  by Ignazio Pillai)
	* Respect `NO_COLOR` environment variable in log output (!4898, work by
	  Aaron Andersen)
	* Update file system type lists to mark more file system types as system ones
	  and to recognise `ntfs3` file systems (!4916 and #3828, work by
	  Christian Hergert and Alexander Schwinn)
	* Add `G_GNUC_FLAG_ENUM` attribute to mark enums as flags (!4900, work by
	  Philip Chimento)
	* Add a static CRT constructor and fusion manifest XML for GLib utilities on
	  Windows so that `stderr` can be unbuffered and streams are flushed on exit
	  (#3733, work by Luca Bacci)
	* Fix `G_FILE_MONITOR_WATCH_HARD_LINKS` on Windows (#3819, work by Jehan)
	* Bugs fixed:
	  - #74 ignore case and '-' vs '_' differences when maching on enum/flag
	    nick/name (Emmanuel Fleury)
	  - #1181 Test failure: check_expected_events
	  - #3360 msys2-mingw32 CI failure: mingw-w64-i686-gcc and mingw-w64-i686-gcc-
	    objc are in conflict
	  - #3733 gi-compile-repository.py test intermittently fails on Windows with
	    empty stderr (Luca Bacci)
	  - #3818 g_main_context_check with a NULL context crashes (Michiel Jan Laurens
	    de Hoon)
	  - #3819 G_FILE_MONITOR_WATCH_HARD_LINKS flag does not monitor files on Windows
	  - #3827 (CVE-2025-13601) (#YWH-PGM9867-134) Incorrect calculation of buffer
	    size in g_escape_uri_string() (Philip Withnall)
	  - #3828 NTFS not detected by g_file_info_get_attribute_string
	  - #3834 (CVE-2025-14087) (#YWH-PGM9867-145) Buffer underflow on Glib through
	    glib/gvariant via bytestring_parse() or string_parse() leads to OOB Write
	    (Philip Withnall)
	  - #3840 GTask: g_task_run_in_thread never starts pending tasks (Ignazio
	    Pillai)
	  - #3843 glib: Integer overflow in `g_bytes_new_from_bytes()` leads to
	    corrupted `GBytes` object (Philip Withnall)
	  - #3845 (CVE-2025-14512) GIO: Integer overflow in file attribute escaping
	    (Philip Withnall)
	  - #3851 Integer overflow in `g_buffered_input_stream_peek()` leads to
	    segmentation fault (Philip Withnall)
	  - #3859 Return type of gi_callable_info_get_closure_native_address() should be
	    void* (Philip Chimento)
	  - !4883 ci: Do not use anymore only/except deprecated syntax
	  - !4885 ci: Track changes to gir files using artifacts and MRs comments
	  - !4898 glog: respect NO_COLOR environment variable
	  - !4899 genvironment: consider macOS behavior when testing g_getenv
	  - !4900 Add G_GNUC_FLAG_ENUM
	  - !4904 glog: guard NO_COLOR environment variable check with a GOnce for
	    performance reasons
	  - !4907 completion: fix error on nounset mode unknown completions
	  - !4908 glocalfile: Complain if `faccessat` sets an unusual error and use
	    AT_FDCWD
	  - !4909 glocalfile: Fix trash user cancellation not reported on Windows
	  - !4910 ci: Use issue bot native support for $ISSUE_BOT_API_TOKEN_FILE
	  - !4913 gdbusprivate: check length of path to GDBus binary
	  - !4916 gio/gunixmounts: mark some file-system types as system
	  - !4920 tests: Fix static-link test when running installed
	  - !4921 gutf8: Add tests and clarify documentation for g_unichar_to_utf8()
	  - !4922 ci: Enable the gobject-introspection build for the debian-stable-i386
	    job
	  - !4923 Added AIX implementation of g_unix_fd_query_path
	  - !4926 Fix g_strcompress docs (mod 256)
	  - !4928 Update of the Occitan translation
	  - !4930 gio/gunixmounts: Mark more file systems as system internal
	  - !4931 gio/gunixmounts: Replace /bin/efi with /boot/efi
	  - !4937 docs(GResource): Tweak overlays description
	  - !4939 gsocks4aproxy: Fix a buffer leak when finishing connecting
	  - !4941 gsignal: Cleanup handler disconnection avoiding unneeded operations
	  - !4942 gio: Fix a few -Wsign-conversion warnings
	  - !4943 ci: Some fixups on the gir checker
	* Translation updates:
	  - Occitan (post 1500) (Mejans)

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 config/rootfiles/common/glib | 18 ++++++++++--------
 lfs/glib                     |  6 +++---
 2 files changed, 13 insertions(+), 11 deletions(-)

diff --git a/config/rootfiles/common/glib b/config/rootfiles/common/glib
index cd4ef61da..cd96e6f7a 100644
--- a/config/rootfiles/common/glib
+++ b/config/rootfiles/common/glib
@@ -106,6 +106,8 @@ usr/include/glib-2.0/gio/gdebugcontroller.h
 #usr/include/glib-2.0/gio/gioscheduler.h
 #usr/include/glib-2.0/gio/giostream.h
 #usr/include/glib-2.0/gio/giotypes.h
+#usr/include/glib-2.0/gio/giptosmessage.h
+#usr/include/glib-2.0/gio/gipv6tclassmessage.h
 #usr/include/glib-2.0/gio/glistmodel.h
 #usr/include/glib-2.0/gio/gliststore.h
 #usr/include/glib-2.0/gio/gloadableicon.h
@@ -337,22 +339,22 @@ usr/include/glib-2.0/gio/gdebugcontroller.h
 #usr/lib/glib-2.0/include/glibconfig.h
 #usr/lib/libgio-2.0.so
 usr/lib/libgio-2.0.so.0
-usr/lib/libgio-2.0.so.0.8700.0
+usr/lib/libgio-2.0.so.0.8800.0
 #usr/lib/libgirepository-2.0.so
 usr/lib/libgirepository-2.0.so.0
-usr/lib/libgirepository-2.0.so.0.8700.0
+usr/lib/libgirepository-2.0.so.0.8800.0
 #usr/lib/libglib-2.0.so
 usr/lib/libglib-2.0.so.0
-usr/lib/libglib-2.0.so.0.8700.0
+usr/lib/libglib-2.0.so.0.8800.0
 #usr/lib/libgmodule-2.0.so
 usr/lib/libgmodule-2.0.so.0
-usr/lib/libgmodule-2.0.so.0.8700.0
+usr/lib/libgmodule-2.0.so.0.8800.0
 #usr/lib/libgobject-2.0.so
 usr/lib/libgobject-2.0.so.0
-usr/lib/libgobject-2.0.so.0.8700.0
+usr/lib/libgobject-2.0.so.0.8800.0
 #usr/lib/libgthread-2.0.so
 usr/lib/libgthread-2.0.so.0
-usr/lib/libgthread-2.0.so.0.8700.0
+usr/lib/libgthread-2.0.so.0.8800.0
 #usr/lib/pkgconfig/gio-2.0.pc
 #usr/lib/pkgconfig/gio-unix-2.0.pc
 #usr/lib/pkgconfig/girepository-2.0.pc
@@ -375,8 +377,8 @@ usr/lib/libgthread-2.0.so.0.8700.0
 #usr/share/gdb/auto-load
 #usr/share/gdb/auto-load/usr
 #usr/share/gdb/auto-load/usr/lib
-#usr/share/gdb/auto-load/usr/lib/libglib-2.0.so.0.8700.0-gdb.py
-#usr/share/gdb/auto-load/usr/lib/libgobject-2.0.so.0.8700.0-gdb.py
+#usr/share/gdb/auto-load/usr/lib/libglib-2.0.so.0.8800.0-gdb.py
+#usr/share/gdb/auto-load/usr/lib/libgobject-2.0.so.0.8800.0-gdb.py
 #usr/share/gettext/its
 #usr/share/gettext/its/gschema.its
 #usr/share/gettext/its/gschema.loc
diff --git a/lfs/glib b/lfs/glib
index 7459d3bf4..1b6e2269f 100644
--- a/lfs/glib
+++ b/lfs/glib
@@ -1,7 +1,7 @@
 ###############################################################################
 #                                                                             #
 # IPFire.org - A linux based firewall                                         #
-# Copyright (C) 2007-2025  IPFire Team  <info@ipfire.org>                     #
+# Copyright (C) 2007-2026  IPFire Team  <info@ipfire.org>                     #
 #                                                                             #
 # This program is free software: you can redistribute it and/or modify        #
 # it under the terms of the GNU General Public License as published by        #
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 2.87.0
+VER        = 2.88.0
 #          https://download.gnome.org/sources/glib/
 
 THISAPP    = glib-$(VER)
@@ -41,7 +41,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 799fc394e15c90c357687b681041530d9035af1c1d9ec16eaeb2453f3041e8c2a9d64b3e4e033e186975a3551edb95a4b1605300fa1384d7bf5f6600ce89ac18
+$(DL_FILE)_BLAKE2 = b540e0f5490f85b44cfad5d819f4a6fd911addc26fed8b8b49852bd6ec322d7d16136b691452030cf5f590374ea06cf8fdb8c9109d5cbe7b68625379bbd40615
 
 install : $(TARGET)
 
-- 
2.54.0

[PATCH] harfbuzz: Update to version 14.2.0

[Adolf Belka]

- Update from version 14.0.0 to 14.2.0
- Update of rootfile
- Changelog
    14.2.0
	- GPU library:
	  * New color-glyph paint renderer, based on design by Lê Duy Quang.
	    `hb_gpu_paint_t` walks a font's paint tree (COLRv0 or COLRv1) and encodes
	    its layers (solid fills, linear / radial / sweep gradients, transforms,
	    composite groups) into a compact blob.
	    A new fragment-shader function `hb_gpu_paint()` renders the blob in
	    premultiplied RGBA; monochrome glyphs are handled transparently via a
	    synthesized foreground-colored layer.
	    Shader sources provided in GLSL, WGSL, MSL, and HLSL.
	  * Paint encoder limitations: the encoder sets `unsupported` and returns
	    `NULL` when `num_ops` would exceed 32767, `push_group` nests deeper than 4,
	    or the paint tree calls back through the image callback (PaintImage).
	    Nested glyph clips are intersected up to 3 levels; a few composite modes
	    use approximate fallbacks; `push_clip_rectangle` is silently ignored.
	  * Encode entry point now returns extents and auto-clears the encoder; the
	    standalone `get_extents()` is gone.
	  * Gradient color stop interpolation now happens in premultiplied space per
	    the OpenType COLR specification.
	  * The foreground color sentinel (`is_foreground`) now correctly preserves the
	    paint-tree alpha from the encoded color data instead of discarding it.
	  * The hb-gpu utility gains `--draw` / `--paint` flags with per-font
	    auto-detect, and `--output-file` / `-o` for headless single-frame rendering
	    to a PPM image.
	- Vector library:
	  * New PDF output backend. Vector paint glyphs now render to PDF page content,
	    producing scalable COLRv0 / COLRv1 color-glyph artwork (solid fills, linear
	    / radial / sweep gradients, blend modes, PNG images with transparency) that
	    can be embedded directly in PDF documents. Useful for PDF producers such as
	    LibreOffice that want crisp, resolution-independent color emoji.
	  * New SVG id prefix API on paint allows prefixing document references, which
	    allows for embedding multiple SVGs in the same page without name clashes
	    (`hb_vector_paint_set_svg_prefix`).
	  * Removed glyph path dedup from vector draw and paint. Each glyph is emitted
	    inline; no `<defs>` / `<use>` caching.
	  * `_glyph()` functions are now thin convenience wrappers documented as
	    equivalent expansions of the underlying font draw/paint API.
	  * Drop glyph-source rendering of SVG-in-OT fonts.
	- Raster library:
	  * Drop glyph-source rendering of SVG-in-OT fonts.
	- Across Draw / Paint subsystems:
	  * `_reset()` methods gain matching`_clear()` companions that drop accumulated
	    data while preserving user configuration. Getter companions added for
	    setters across raster, vector, and gpu types.
	- Various fuzzer fixes for raster, vector, and GPU libraries.
	- Paint API:
	  * New arbitrary-path clip: `hb_paint_push_clip_path_start` / `_end` let
	    callers clip to a caller-supplied outline, not just a font glyph.
	    `push_clip_path_start()` returns the draw-funcs (and matching draw data)
	    for the backend’s path accumulator; the caller drives `hb_draw_*()` into
	    it, then calls `push_clip_path_end()`, followed by painted ops, then
	    `hb_paint_pop_clip()` to release the clip. Implemented for all paint
	    backends: vector (SVG defs + clipPath + url ref), vector PDF (q / path / W
	    n), raster (path rendered to an alpha mask, intersected with the current
	    clip), and GPU (the path is encoded into a Slug sub-blob so the fragment
	    shader clips against it the same way it clips against glyph outlines).
	- Shaping:
	  * Indic: categorize U+1CF5 and U+1CF6 as CS.
	- Changed API
	  * GPU library:
	    - `hb_gpu_draw_glyph()` now returns `void` (was `hb_bool_t`). Use
	      `hb_gpu_draw_glyph_or_fail()` if you need the success status.
	    - `hb_gpu_paint_glyph()` now returns `void` (was `hb_bool_t`) and
	      internally synthesizes a foreground-colored layer for non-color glyphs
	      via `hb_font_paint_glyph()`, so every glyph with an outline produces
	      output. Use `hb_gpu_paint_glyph_or_fail()` (which delegates to
	      `hb_font_paint_glyph_or_fail()`) if you need to distinguish color vs
	      synthesized paint. Encoder-level limits (unsupported ops, group-stack
	      overflow) no longer fail paint_glyph; they surface from
	      `hb_gpu_paint_encode()` returning `NULL`.
	    - `hb_gpu_draw_encode()` now takes an `extents` out-parameter and
	      auto-clears the encoder on return.
	    - `hb_gpu_draw_darken()` renamed to `hb_gpu_stem_darken()`.
	  * Vector library:
	    - `hb_vector_svg_set_precision()` and its paint counterpart renamed to
	      `hb_vector_draw_set_precision()` / `hb_vector_paint_set_precision()`
	      (SVG-specific naming is inaccurate with the PDF backend added).
	    - `hb_vector_draw_glyph()` / `hb_vector_paint_glyph()` now return `void`
	      (were `hb_bool_t`). Paint additionally gains a draw fallback for
	      non-color glyphs. Use the matching `_or_fail()` variants for the
	      `hb_bool_t` return.
	  * Raster library:
	    - `hb_raster_draw_glyph()` / `hb_raster_paint_glyph()` now return `void`
	      (were `hb_bool_t`). Paint additionally gains a draw fallback for
	      non-color glyphs. Use the matching `_or_fail()` variants for the
	      `hb_bool_t` return.
	  * General:
	    - Many read-only getters gained const on their object argument.
	    - Six public draw / paint funcs getters across raster, vector, and gpu now
	      take a const-pointer to the relevant context instance instead of being
	      singletons:
	        hb_raster_draw_get_funcs (const hb_raster_draw_t *)`
	        hb_raster_paint_get_funcs (const hb_raster_paint_t *)
	        hb_vector_draw_get_funcs (const hb_vector_draw_t *)
	        hb_vector_paint_get_funcs (const hb_vector_paint_t *)
	        hb_gpu_draw_get_funcs (const hb_gpu_draw_t *)
	        hb_gpu_paint_get_funcs (const hb_gpu_paint_t *)
	      This is what lets vector_paint dispatch to SVG- vs PDF- flavored
	      callbacks transparently when called from outside code; the others
	      currently use the instance for symmetry only.
	- New API
	  * Draw:
	    +HB_DRAW_LINE_CAP_BUTT
	    +HB_DRAW_LINE_CAP_ROUND
	    +HB_DRAW_LINE_CAP_SQUARE
	    +hb_draw_line_cap_t
	    +hb_draw_line()
	    +hb_draw_rectangle()
	    +hb_draw_circle()
	  * Paint:
	    +hb_paint_push_clip_path_start_func_t
	    +hb_paint_push_clip_path_end_func_t
	    +hb_paint_sweep_gradient_tile_func_t
	    +hb_paint_push_group_for_func_t
	    +hb_paint_push_group_for()
	    +hb_paint_funcs_set_push_group_for_func()
	    +hb_paint_reduce_linear_anchors()
	    +hb_paint_normalize_color_line()
	    +hb_paint_sweep_gradient_tiles()
	    +hb_paint_push_clip_path_start()
	    +hb_paint_push_clip_path_end()
	    +hb_paint_funcs_set_push_clip_path_start_func()
	    +hb_paint_funcs_set_push_clip_path_end_func()
	  * GPU library:
	    +HB_GPU_SHADER_STAGE_VERTEX
	    +HB_GPU_SHADER_STAGE_FRAGMENT
	    +HB_GPU_SHADER_LANG_INVALID
	    +hb_gpu_shader_stage_t
	    +hb_gpu_paint_t
	    +hb_gpu_paint_create_or_fail()
	    +hb_gpu_paint_reference()
	    +hb_gpu_paint_destroy()
	    +hb_gpu_paint_set_user_data()
	    +hb_gpu_paint_get_user_data()
	    +hb_gpu_paint_get_funcs()
	    +hb_gpu_paint_set_palette()
	    +hb_gpu_paint_get_palette()
	    +hb_gpu_paint_set_custom_palette_color()
	    +hb_gpu_paint_clear_custom_palette_colors()
	    +hb_gpu_paint_set_scale()
	    +hb_gpu_paint_get_scale()
	    +hb_gpu_paint_glyph()
	    +hb_gpu_paint_encode()
	    +hb_gpu_paint_clear()
	    +hb_gpu_paint_reset()
	    +hb_gpu_paint_recycle_blob()
	    +hb_gpu_paint_shader_source()
	    +hb_gpu_paint_glyph_or_fail()
	    +hb_gpu_shader_source()
	    +hb_gpu_draw_shader_source()
	    +hb_gpu_draw_clear()
	    +hb_gpu_draw_get_scale()
	    +hb_gpu_draw_glyph_or_fail()
	  * Raster library:
	    +hb_raster_draw_clear()
	    +hb_raster_draw_glyph_or_fail()
	    +hb_raster_paint_clear()
	    +hb_raster_paint_glyph_or_fail()
	    +hb_raster_paint_set_palette()
	    +hb_raster_paint_get_palette()
	    +hb_raster_paint_get_foreground()
	    +hb_raster_paint_set_background()
	    +hb_raster_paint_get_background()
	  * Vector library:
	    +HB_VECTOR_FORMAT_PDF
	    +hb_vector_draw_clear()
	    +hb_vector_draw_get_precision()
	    +hb_vector_draw_get_format()
	    +hb_vector_draw_glyph_or_fail()
	    +hb_vector_draw_new_path()
	    +hb_vector_draw_set_foreground()
	    +hb_vector_draw_get_foreground()
	    +hb_vector_draw_set_background()
	    +hb_vector_draw_get_background()
	    +hb_vector_paint_clear()
	    +hb_vector_paint_get_precision()
	    +hb_vector_paint_get_format()
	    +hb_vector_paint_get_foreground()
	    +hb_vector_paint_set_background()
	    +hb_vector_paint_get_background()
	    +hb_vector_paint_get_palette()
	    +hb_vector_paint_glyph_or_fail()
	    +hb_vector_paint_set_svg_prefix()
	    +hb_vector_paint_get_svg_prefix()
	- Removed API
	  * GPU library:
	    -hb_gpu_shader_fragment_source()   (replaced by hb_gpu_shader_source(stage))
	    -hb_gpu_shader_vertex_source()     (replaced by hb_gpu_shader_source(stage))
	    -hb_gpu_draw_get_extents()         (extents are now an out-parameter of hb_gpu_draw_encode())
	  * Vector library:
	    -hb_vector_draw_set_flat()
	    -hb_vector_draw_get_flat()
	    -hb_vector_paint_set_flat()
	    -hb_vector_paint_get_flat()
    14.1.0
	- GPU library improvements:
	  * Add anti-aliased rendering for small sizes.
	  * Store font scale in blob header.
	  * Port scale/ppem support to MSL, WGSL, and HLSL shaders.
	  * Fix contour breaks and bounds quantization in encode.
	  * Fix garbled rendering after font change in web demo.
	  * Various robustness fixes.
	- Various fuzzing fixes for `harfbuzz-raster`, `harfbuzz-gpu` and
	  `harfbuzz-vector` libraries.
	- Move `HB_NO_CFF` from `HB_LEAN` to `HB_NO_DRAW` closure, and fix
	  `HB_TINY` build.
	- New API:
	  +hb_gpu_draw_set_scale()

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 config/rootfiles/common/harfbuzz | 14 +++++++-------
 lfs/harfbuzz                     |  4 ++--
 2 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/config/rootfiles/common/harfbuzz b/config/rootfiles/common/harfbuzz
index 799c2ddc1..63fe01c89 100644
--- a/config/rootfiles/common/harfbuzz
+++ b/config/rootfiles/common/harfbuzz
@@ -52,25 +52,25 @@ usr/include/harfbuzz/hb-script-list.h
 #usr/lib/cmake/harfbuzz/harfbuzz-config.cmake
 #usr/lib/libharfbuzz-cairo.so
 usr/lib/libharfbuzz-cairo.so.0
-usr/lib/libharfbuzz-cairo.so.0.61400.0
+usr/lib/libharfbuzz-cairo.so.0.61420.0
 #usr/lib/libharfbuzz-gobject.so
 usr/lib/libharfbuzz-gobject.so.0
-usr/lib/libharfbuzz-gobject.so.0.61400.0
+usr/lib/libharfbuzz-gobject.so.0.61420.0
 #usr/lib/libharfbuzz-gpu.so
 usr/lib/libharfbuzz-gpu.so.0
-usr/lib/libharfbuzz-gpu.so.0.61400.0
+usr/lib/libharfbuzz-gpu.so.0.61420.0
 #usr/lib/libharfbuzz-raster.so
 usr/lib/libharfbuzz-raster.so.0
-usr/lib/libharfbuzz-raster.so.0.61400.0
+usr/lib/libharfbuzz-raster.so.0.61420.0
 #usr/lib/libharfbuzz-subset.so
 usr/lib/libharfbuzz-subset.so.0
-usr/lib/libharfbuzz-subset.so.0.61400.0
+usr/lib/libharfbuzz-subset.so.0.61420.0
 #usr/lib/libharfbuzz-vector.so
 usr/lib/libharfbuzz-vector.so.0
-usr/lib/libharfbuzz-vector.so.0.61400.0
+usr/lib/libharfbuzz-vector.so.0.61420.0
 #usr/lib/libharfbuzz.so
 usr/lib/libharfbuzz.so.0
-usr/lib/libharfbuzz.so.0.61400.0
+usr/lib/libharfbuzz.so.0.61420.0
 #usr/lib/pkgconfig/harfbuzz-cairo.pc
 #usr/lib/pkgconfig/harfbuzz-gobject.pc
 #usr/lib/pkgconfig/harfbuzz-gpu.pc
diff --git a/lfs/harfbuzz b/lfs/harfbuzz
index 508944200..f6f83f22a 100644
--- a/lfs/harfbuzz
+++ b/lfs/harfbuzz
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 14.0.0
+VER        = 14.2.0
 
 THISAPP    = harfbuzz-$(VER)
 DL_FILE    = $(THISAPP).tar.xz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = a4fe29775ba4844c197a0d46a9d8db197301ea74ad21475ebe799a23d7a3ccd1ac642d15913067d2d7f4714381658b078827be2d0aec86dea91bcabfba66ab43
+$(DL_FILE)_BLAKE2 = bc0df1fad40bbd2f7348d16e1d17927285a1e64eae02bf27f5921691cb77cbe8646a5f51e14c97953416b9e08f326c824646d2f114b59e37579657727cf706f4
 
 install : $(TARGET)
 
-- 
2.54.0

[PATCH] hwdata: Update to version 0.406

[Adolf Belka]

- Update from version 0.404 to 0.406
- No change to rootfile
- Changelog
    0.406
	Update usb and vendor ids
    0.405
	Update usb and vendor ids

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 lfs/hwdata | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/lfs/hwdata b/lfs/hwdata
index c4f3a37b4..5c7a9fc4e 100644
--- a/lfs/hwdata
+++ b/lfs/hwdata
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 0.404
+VER        = 0.406
 
 THISAPP    = hwdata-$(VER)
 DL_FILE    = $(THISAPP).tar.gz
@@ -42,7 +42,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 50e83e53a684219b17bb2e1038641aa81cfb58b57ab1c18562bd6432a4204a58e17609e780b58670aa08b870d755caf903f3da7bd113a70d40ac71b70105d2bc
+$(DL_FILE)_BLAKE2 = 49f001a36d83af15c6532a346593f07d2bee596ee544781787657321a6d4f1d1c9addf0d1b68fdafae72212bdf0c0d4b82de6f8c09c1dfb346c149421a604858
 
 install : $(TARGET)
 
-- 
2.54.0

[PATCH] iana-etc: Update to version 20260409

[Adolf Belka]

- Update from version 20260327 to 20260409
- No change to rootfile
- No changelog provided

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 lfs/iana-etc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/lfs/iana-etc b/lfs/iana-etc
index 8d7f9a931..a9a79b464 100644
--- a/lfs/iana-etc
+++ b/lfs/iana-etc
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 20260327
+VER        = 20260409
 #          https://github.com/Mic92/iana-etc
 
 THISAPP    = iana-etc-$(VER)
@@ -41,7 +41,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 280ba88a2ea3c6885f6c852bec73a6cd303f5a1eaee0b00afd4a7f756b6e9d90306e338a07b74501cc6334cdab56fb6f2acf7b5b6320eca1439c7abd4e0427d7
+$(DL_FILE)_BLAKE2 = 4b8f1056db4a38881a3efeb20e1b02ea2e2377a06f8fdf6c0b467277fab15c6b5e6c2e25d2eebe9140148591cd970283195adf2aabd5bbc5c4d61579c1845e56
 
 install : $(TARGET)
 
-- 
2.54.0

[PATCH] iperf3: Update to version 3.21

[Adolf Belka]

- Update from version 3.19 to 3.21
- No change to rootfile
- 3 CVE fixes were applied in version 3.19.1
- Changelog
3.21
* Notable user-visible changes
    * Support has been added for Global Segmentation Offload (GSO) and
      Global Receive Offload (GRO) under Linux (PR #1926, PR #2007,
      also note that a number of other pull requests were submitted
      towards this functionality).
    * The `--bind-dev` option is now supported on macOS (PR #1945).
    * Support has been added on macOS for the equivalent of the
      `tcp_info` structure (#1411, PR #2008). This change results in
      TCP window information being printed in human-readable output
      and a number of TCP statistics being added to the JSON output.
    * The iperf3 server provides more information about various error
      conditions to the client (PR #1914, PR #1931, PR #1950).
    * The maximum value for the `--set-mss` option is now 32K (PR
      #1816). Note that this option still does not work reliably in
      all cases.
    * The cancellation type of child threads was changed from
      `PTHREAD_CANCEL_ASYNCHRONOUS` to `PTHREAD_CANCEL_DEFERRED`
      (#1991, #2003, PR #2004). This change fixes some hangs that
      could occur at the end of a test.
    * A race condition leading to a crash when closing sockets at the
      end of a test has been fixed (PR #1990).
    * iperf3 no longer erroneously prints that zero UDP packets were
      lost during a lossy UDP test (#1984, PR #1988).
    * A division by zero error has been avoided (PR #2002).
    * The security posture of the `iperf3.service` file has been
      improved considerably by updating a number of settings (PR
      #1855). Note that this file is neither installed nor activated
      by default.
* Notable developer-visible changes
    * iperf3 finally performs `ldconfig` as a part of `make install`
      on platforms that require it (#1995, PR #2005).
    * Various bug fixes (PR #1960, PR #1981, PR #2001).
    * Various documentation fixes (PR #1972, PR #1974, PR #1993).
3.20
* Notable user-visible changes
    * Millisecond-resolution representations have been added to JSON
      timestamps. (PR #1846)
    * The reorder_seen metric, where available, is now available in
      the JSON output. (PR #1278)
    * A division by zero error has been fixed. (PR #1906)
    * Some command-line options were not properly restricted to the
      client or server; this problem has been fixed. (#1892 / PR #1894)
    * The combination of `--udp` and `--file` is now explicitly
      disallowed. (PR #1909)
    * It is now possible to get both the full JSON result object as
      well as streaming intermediate JSON result objects. This
      functionality is enabled by using the new `--json-stream-full`
      command-line flag, in addition to the existing `--json-stream`
      flag (PR #1903)
    * Sends with `--zerocopy` are now properly seeded with data
      instead of being all-zeroes. (PR #1949)
    * The `--server-max-duration` flag is now allowed on the iperf3 server to impose
      a maximum duration on timed tests. (PR #1684)
    * The `--rcv-timeout` flag is now ignored for `--bidir`
      tests. This change prevents premature termination of
      bidirectional tests. (#1766 / PR #1946)
    * Several errors in the authentication code were uncovered when
      building with OpenSSL 3.5.3 and later versions. These were
      fixed. (#1951 / PR #1956)
    * Various issues in the iperf3 manual page were fixed up. (PR
      #1887, PR #1927, PR #1936, PR #1941, #1891 / PR #1952)
* Notable developer-visible changes
    * A build failure with uClibc has been fixed. (#1888 / PR #1890)
    * It is now possible to use the API to load RSA keys from a file.
      (PR #1889)
    * Some calls to sprintf() were replaced with calls to
      snprintf(). There were no hazards in the code as written, but
      this change might help silence some compiler warnings and
      potentially prevent future vulnerabilities. (PR #1929)
    * Proper error handling has been added to the `unit_atoX()`
      functions. (PR #1394)
    * Some memory handling errors in `t_auth` were fixed. (PR #1953)
    * Minor enhancements and fixes to GitHub Actions workflows (PR
      #1919, PR #1928, PR #1942).
3.19.1
* Notable user-visible changes
    * SECURITY NOTE: Thanks to Han Lee with Apple Information Security
                     for finding and reporting several memory errors
                     including a buffer overflow within the
                     `--skip-rx-copy` option, and two memory errors
                     within authentication, including a heap overflow
                     in the plaintext password and an assert.
    * An off-by-one heap overflow has been fixed in authentication.
      (CVE-2025-54349, ESNET-SECADV-2025-0003)
    * An assert in authentication has been removed. (CVE-2025-54350,
      ESNET-SECADV-2025-0002)
    * A buffer overflow in the `--skip-rx-copy` option for zerocopy
      has been fixed. (CVE-2025-54351, ESNET-SECADV-2025-0001)

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 lfs/iperf3 | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/lfs/iperf3 b/lfs/iperf3
index dbbc5a5ce..7c4095ed9 100644
--- a/lfs/iperf3
+++ b/lfs/iperf3
@@ -1,7 +1,7 @@
 ###############################################################################
 #                                                                             #
 # IPFire.org - A linux based firewall                                         #
-# Copyright (C) 2007-2025  IPFire Team  <info@ipfire.org>                     #
+# Copyright (C) 2007-2026  IPFire Team  <info@ipfire.org>                     #
 #                                                                             #
 # This program is free software: you can redistribute it and/or modify        #
 # it under the terms of the GNU General Public License as published by        #
@@ -26,7 +26,7 @@ include Config
 
 SUMMARY    = A tool to measure network performance
 
-VER        = 3.19
+VER        = 3.21
 
 THISAPP    = iperf-$(VER)
 DL_FILE    = $(THISAPP).tar.gz
@@ -34,7 +34,7 @@ DL_FROM    = $(URL_IPFIRE)
 DIR_APP    = $(DIR_SRC)/$(THISAPP)
 TARGET     = $(DIR_INFO)/$(THISAPP)
 PROG       = iperf3
-PAK_VER    = 8
+PAK_VER    = 9
 
 DEPS       =
 
@@ -51,7 +51,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = b6f5e9bdef5ee3fc38bef893144bc6ad003ccbc7b3db4793dbd2aec5998faa55cac215a0db06ab37729dc1c05787ebacbf09db8a6e6517f82492a6c67ec3d9e6
+$(DL_FILE)_BLAKE2 = 696a13caaa5cf52a69c65566ae4d2d8788a4225d689d32e73306f5174dad141c92ea3acdda9a929803a1e57eee6844350be2da749e5f44c48bf0ab7890e97745
 
 install : $(TARGET)
 check : $(patsubst %,$(DIR_CHK)/%,$(objects))
-- 
2.54.0

[PATCH] iproute2: Update to version 7.0.0

[Adolf Belka]

- Update from version 6.17.0 to 7.0.0
- Update of rootfile
- Changelog is not provided. Details of changes for versions 7.0.0, 6.19.0 and 6.18.0
   can be found from the git commit changes
   https://git.kernel.org/pub/scm/network/iproute2/iproute2.git

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 config/rootfiles/common/iproute2 | 5 +++++
 lfs/iproute2                     | 6 +++---
 2 files changed, 8 insertions(+), 3 deletions(-)

diff --git a/config/rootfiles/common/iproute2 b/config/rootfiles/common/iproute2
index 804c6bf6c..12fa8a968 100644
--- a/config/rootfiles/common/iproute2
+++ b/config/rootfiles/common/iproute2
@@ -12,10 +12,12 @@ sbin/bridge
 sbin/ctstat
 sbin/dcb
 sbin/devlink
+sbin/dpll
 sbin/genl
 sbin/ifstat
 sbin/ip
 sbin/lnstat
+sbin/netshaper
 sbin/nstat
 sbin/rdma
 sbin/routel
@@ -35,6 +37,7 @@ sbin/vdpa
 #usr/lib/tc/paretonormal.dist
 #usr/sbin/arpd
 #usr/share/bash-completion/completions/devlink
+#usr/share/bash-completion/completions/dpll
 usr/share/bash-completion/completions/tc
 #usr/share/man/man3/libnetlink.3
 #usr/share/man/man7/tc-hfsc.7
@@ -62,6 +65,7 @@ usr/share/bash-completion/completions/tc
 #usr/share/man/man8/devlink-sb.8
 #usr/share/man/man8/devlink-trap.8
 #usr/share/man/man8/devlink.8
+#usr/share/man/man8/dpll.8
 #usr/share/man/man8/genl.8
 #usr/share/man/man8/ifstat.8
 #usr/share/man/man8/ip-address.8
@@ -92,6 +96,7 @@ usr/share/bash-completion/completions/tc
 #usr/share/man/man8/ip-xfrm.8
 #usr/share/man/man8/ip.8
 #usr/share/man/man8/lnstat.8
+#usr/share/man/man8/netshaper.8
 #usr/share/man/man8/nstat.8
 #usr/share/man/man8/rdma-dev.8
 #usr/share/man/man8/rdma-link.8
diff --git a/lfs/iproute2 b/lfs/iproute2
index bbbf5d88a..01682c576 100644
--- a/lfs/iproute2
+++ b/lfs/iproute2
@@ -1,7 +1,7 @@
 ###############################################################################
 #                                                                             #
 # IPFire.org - A linux based firewall                                         #
-# Copyright (C) 2007-2025  IPFire Team  <info@ipfire.org>                     #
+# Copyright (C) 2007-2026  IPFire Team  <info@ipfire.org>                     #
 #                                                                             #
 # This program is free software: you can redistribute it and/or modify        #
 # it under the terms of the GNU General Public License as published by        #
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 6.17.0
+VER        = 7.0.0
 #          https://mirrors.edge.kernel.org/pub/linux/utils/net/iproute2/
 
 THISAPP    = iproute2-$(VER)
@@ -41,7 +41,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE)             = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 49b88fd1eaea34376b086be02e72505ca62f52f3c53f3ee29cd273532521fabe8d38062277852dcc69f78b86b9460b213bbeedc9c51ce20d3bb1fd35d86b6fc8
+$(DL_FILE)_BLAKE2 = 1edec3088a16657ee85c1799bf911c6cd75a359efc75fc23ac922474b1e10e9410454d6e6930b58ebe047a8b5fa4f522e9fb7f53a4d9a4e3b84b8979c5aaa926
 
 install : $(TARGET)
 
-- 
2.54.0

[PATCH] libcap-ng: Update to version 0.9.3

[Adolf Belka]

- Update from version 0.9.2 to 0.9.3
- Update of rootfile
- Changelog
    0.9.3
- In cap-audit, split capability analysis across init and runtime phases
- If vm_sockets.h and others are not available, remove "netcap --advanced"
- Add netcap --list-interfaces & --interface to restrict output to 1 interface
- Put bash completions in /usr/share/bash-completion/completions/
- capng_change_id now detects it added setpcap and drops only if it added it
- Add capng_stage_additional_groups and its support in capng_change_id
- Add CAPNG_APPLY_BOUNDING flag to capng_change_id to direct it to apply changes
- filecap: add path-to-fd consistency check in capability write path

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 config/rootfiles/common/libcap-ng | 3 ++-
 lfs/libcap-ng                     | 4 ++--
 2 files changed, 4 insertions(+), 3 deletions(-)

diff --git a/config/rootfiles/common/libcap-ng b/config/rootfiles/common/libcap-ng
index 683ed3bb3..33e96b97a 100644
--- a/config/rootfiles/common/libcap-ng
+++ b/config/rootfiles/common/libcap-ng
@@ -1,7 +1,6 @@
 #usr/bin/filecap
 #usr/bin/netcap
 #usr/bin/pscap
-#usr/etc/bash_completion.d/libcap-ng.bash_completion
 #usr/include/cap-ng.h
 #usr/lib/libcap-ng.la
 #usr/lib/libcap-ng.so
@@ -13,6 +12,7 @@ usr/lib/libdrop_ambient.so.0
 usr/lib/libdrop_ambient.so.0.0.0
 #usr/lib/pkgconfig/libcap-ng.pc
 #usr/share/aclocal/cap-ng.m4
+#usr/share/bash-completion/completions/libcap-ng.bash_completion
 #usr/share/man/man3/capng_apply.3
 #usr/share/man/man3/capng_apply_caps_fd.3
 #usr/share/man/man3/capng_capability_to_name.3
@@ -32,6 +32,7 @@ usr/lib/libdrop_ambient.so.0.0.0
 #usr/share/man/man3/capng_save_state.3
 #usr/share/man/man3/capng_set_rootid.3
 #usr/share/man/man3/capng_setpid.3
+#usr/share/man/man3/capng_stage_additional_groups.3
 #usr/share/man/man3/capng_update.3
 #usr/share/man/man3/capng_updatev.3
 #usr/share/man/man7/libdrop_ambient.7
diff --git a/lfs/libcap-ng b/lfs/libcap-ng
index 9915e9587..85b2dda85 100644
--- a/lfs/libcap-ng
+++ b/lfs/libcap-ng
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 0.9.2
+VER        = 0.9.3
 
 THISAPP    = libcap-ng-$(VER)
 DL_FILE    = $(THISAPP).tar.gz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = c9823bd7397e82fcc00a201b275283e8f49597ebeff21bec859bbfd962b55152caf10ede1dc2060634bda2c3c8523f446671aeab55a9a1c5b78d0031047ce13b
+$(DL_FILE)_BLAKE2 = 8050f69c91a8c5214d718d3ad750cf50db25690b9b8d59f37db32d33d5a0fe864afe8064ca4261f27f49f65064926c816a627a9c1c7a28e268a1a459409c59d8
 
 install : $(TARGET)
 
-- 
2.54.0

[PATCH] libcap: Update to version 2.78

[Adolf Belka]

- Update from version 2.77 to 2.78
- Update of rootfile
- Changelog
    2.78
Fix mistakes in setcap for reporting errors: report them with the appropriate filename.
 Thanks to Nikolas for reporting these in Bug 220245.
Fix bug in cap.GetIAB() reported and fix provided by Garret Kelly via Bug 220420.
Improve libcap managed memory allocation and support CHERI RISC-V. Reported with fix
 by Chris Hofer via Bug 220415.
Add (unverified) support for the PSX mechanism on microblaze, arc, openrisc and xtensa
 architectures. Thanks to Tom Petazzoni for including these in  Bug 219915
    Please let me know if these work or fail on these architectures.
Add C++ support to the run a .so file as an executable mechanism employed by libcap.so,
 libpsx.so and pam_cap.so. Not really necessary for the libcap build tree, but wanted
 to capture the details of my recent update to a Stackoverflow answer on the topic.
Use BUILD_LDFLAGS when compiling _makenames fix contributed by Khem Raj.
    Fix broke some builds, so will revert and apply a more comprehensive fix.
Fixed sendmail issue discussion link. Thanks to Ariel Otilibili for noticing the
 breakage and contributing a fix.
Some debugging fixes for use of the kdebug/ testing setup

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 config/rootfiles/common/libcap | 4 ++--
 lfs/libcap                     | 6 +++---
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/config/rootfiles/common/libcap b/config/rootfiles/common/libcap
index 1b470d075..a3e2752df 100644
--- a/config/rootfiles/common/libcap
+++ b/config/rootfiles/common/libcap
@@ -6,10 +6,10 @@ sbin/setcap
 #usr/include/sys/psx_syscall.h
 #usr/lib/libcap.so
 usr/lib/libcap.so.2
-usr/lib/libcap.so.2.77
+usr/lib/libcap.so.2.78
 #usr/lib/libpsx.so
 #usr/lib/libpsx.so.2
-usr/lib/libpsx.so.2.77
+usr/lib/libpsx.so.2.78
 #usr/lib/pkgconfig/libcap.pc
 #usr/lib/pkgconfig/libpsx.pc
 #usr/lib/security
diff --git a/lfs/libcap b/lfs/libcap
index 24c042095..1259230b7 100644
--- a/lfs/libcap
+++ b/lfs/libcap
@@ -1,7 +1,7 @@
 ###############################################################################
 #                                                                             #
 # IPFire.org - A linux based firewall                                         #
-# Copyright (C) 2007-2025  IPFire Team  <info@ipfire.org>                     #
+# Copyright (C) 2007-2026  IPFire Team  <info@ipfire.org>                     #
 #                                                                             #
 # This program is free software: you can redistribute it and/or modify        #
 # it under the terms of the GNU General Public License as published by        #
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 2.77
+VER        = 2.78
 
 THISAPP    = libcap-$(VER)
 DL_FILE    = $(THISAPP).tar.xz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 9725a5f886907f718a7149841003ac04aced8d322ae190b7035873dc823098c58311f15b9fe7e2a3fec683de6e2eeea108cd008f5f79e8dba24bb20595351812
+$(DL_FILE)_BLAKE2 = 60b1afed4df471e9bbb631deca850920408710fb166335d5640feadf5e2feced0bccae10ba4010eca0dfb0cbb5cd41e255c2e4ac232dc3d18b7d269df9f1e72a
 
 install : $(TARGET)
 
-- 
2.54.0

[PATCH] libgcrypt: Update to version 1.12.2

[Adolf Belka]

- Update from version 1.12.0 to 1.12.2
- Update of rootfile
- Changelog
    1.12.2
 * Bug fixes:
   - Fix possible ECDH buffer overwrite with zeroes.  [T8211]
   - Add a missing bounds check to the Dilithium context handling.
     [T8208]
   - Add point validation when using the new KEM interface.  [T8212]
 * Other:
   - Fix the dead-code of stronger_key_check for RSA.  [T8171]
    1.12.1
 * Bug fixes:
   - Fix for aSmartOS (Solaris) build problem due to AVX2 changes.
     [T8071]
   - Fix a regression in gcry_mpi_ec_curve_point.  [T8080]
   - Make sure to have MPI limbs pre-allocated in ECC and fix
     Weierstrass curve use with PUBKEY_FLAG_PARAM.  [T8094]
 * Other:
    - Add MPI configuration for NetBSD m68k.  [T8069]

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 config/rootfiles/common/libgcrypt | 2 +-
 lfs/libgcrypt                     | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/config/rootfiles/common/libgcrypt b/config/rootfiles/common/libgcrypt
index 968c30cf4..5dc013833 100644
--- a/config/rootfiles/common/libgcrypt
+++ b/config/rootfiles/common/libgcrypt
@@ -5,7 +5,7 @@
 #usr/lib/libgcrypt.la
 #usr/lib/libgcrypt.so
 usr/lib/libgcrypt.so.20
-usr/lib/libgcrypt.so.20.7.0
+usr/lib/libgcrypt.so.20.7.2
 #usr/lib/pkgconfig/libgcrypt.pc
 #usr/share/aclocal/libgcrypt.m4
 #usr/share/info/gcrypt.info
diff --git a/lfs/libgcrypt b/lfs/libgcrypt
index 2ddac800e..75ef9e8ff 100644
--- a/lfs/libgcrypt
+++ b/lfs/libgcrypt
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 1.12.0
+VER        = 1.12.2
 
 THISAPP    = libgcrypt-$(VER)
 DL_FILE    = $(THISAPP).tar.bz2
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 2d600fb5288aed426d99fdd5628dd7382108301371f0d6488d5911f62519802e2b4b53181196955d084b5f11a71e4673b4064db407e1cc55eadc15610faf660c
+$(DL_FILE)_BLAKE2 = f52a10acdbf56a5adc927e22508a30d131a001e8f559d55c72d4ccfea4a514ef7983ab3f985af798c06a9c188639f21c54f1cc0ec6cba968172ddc6bd21ae0bd
 
 install : $(TARGET)
 
-- 
2.54.0

[PATCH] libjpeg: Update to version 3.1.4.1

[Adolf Belka]

- Update from version 3.1.3 to 3.1.4.1
- No change to rootfile
- Changelog
    3.1.4.1
1. Fixed multiple issues, some long-standing and some that were regressions
introduced in 3.1.4, that made the CMake package config files non-relocatable
and broke the `--prefix` option to `cmake --install`.
    3.1.4
1. Fixed an issue in the TurboJPEG 2.x compatibility wrapper whereby, if a
calling program attempted to decompress a lossless JPEG image using
`tjDecompress2()` with decompression scaling, the decompressed image was
unexpectedly unscaled.  This could have led to a buffer overrun if the caller
allocated the packed-pixel destination buffer based on the assumption that the
decompressed image would be scaled down.
2. The SIMD dispatchers now use `getauxval()` or `elf_aux_info()`, if
available, to detect support for Neon and AltiVec instructions on AArch32 and
PowerPC Linux, Android, and *BSD systems.
3. Hardened the libjpeg API against hypothetical applications that may
erroneously set one of the exposed quantization table values to 0 just before
calling `jpeg_start_compress()`.  (This would never happen in a
correctly-written program, because `jpeg_add_quant_table()` clamps all values
less than 1.)
4. Fixed a division-by-zero error that occurred when attempting to use the
jpegtran `-drop` option with a specially-crafted malformed drop image
(specifically an image in which one or more of the quantization table values
was 0.)
5. Fixed an issue in the TurboJPEG API library's data destination manager that
manifested as:
     - a memory leak that occurred if a pre-allocated JPEG destination buffer
was passed to `tj3Compress*()` or `tj3Transform()`, `TJPARAM_NOREALLOC` was
unset, and it was necessary for the library to re-allocate the buffer to
accommodate the destination image, and
     - a potential caller double free that occurred if pre-allocated JPEG
destination buffers were passed to `tj3Transform()`, multiple lossless
transform operations were performed, and it was necessary for the library to
re-allocate the second buffer to accommodate the second destination image.
6. Fixed an issue in `tj3Transform()` whereby, if `TJPARAM_SAVEMARKERS` was set
to 2 or 4, `TJXOPT_COPYNONE` was not specified, an ICC profile was extracted
from the source image, and another ICC profile was associated with the
TurboJPEG instance using `tj3SetICCProfile()`, both profiles were embedded in
the destination image.  The documented API behavior is for `TJXOPT_COPYNONE` to
take precedence over `TJPARAM_SAVEMARKERS` and for `TJPARAM_SAVEMARKERS` to
take precedence over the associated ICC profile.  Thus, `tj3Transform()` now
ignores the associated ICC profile unless `TJXOPT_COPYNONE` is specified or
`TJPARAM_SAVEMARKERS` is set to something other than 2 or 4.
7. Fixed an oversight in the libjpeg API whereby, if a calling application
manually set `cinfo.Ss` (the predictor selection value) to a value less than 1
or greater than 7 after calling `jpeg_enable_lossless()` and prior to calling
`jpeg_start_compress()`, an incorrect (all white) lossless JPEG image was
silently generated.
8. Further hardened the TurboJPEG Java API against hypothetical applications
that may erroneously pass huge values to one of the compression, YUV encoding,
decompression, YUV decoding, or packed-pixel image I/O methods, leading to
signed integer overflow in the JNI wrapper's buffer size checks that rendered
those checks ineffective.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 lfs/libjpeg | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/lfs/libjpeg b/lfs/libjpeg
index da4c04536..b03f795cf 100644
--- a/lfs/libjpeg
+++ b/lfs/libjpeg
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 3.1.3
+VER        = 3.1.4.1
 
 THISAPP    = libjpeg-turbo-$(VER)
 DL_FILE    = $(THISAPP).tar.gz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 3c675aa56b3474ca8a27f355d14dd7411d90471564c5916884e87818b7165e73a6c6b416dc2800e31c10dd1390ae88353e81d80eceb2e22c00b6a81ac5cf3d65
+$(DL_FILE)_BLAKE2 = 7e38379b4e3bb168e6ec081be5852f9a7f4680929d42e5cccb0c00632130eee9200afdc9c2ed99250c3ddfc1cd8dd21f60da54e6c48157884c9173ae1b3f9a9f
 
 install : $(TARGET)
 
-- 
2.54.0

[PATCH] libmpc: Update to version 1.4.1

[Adolf Belka]

- Update from version 1.4.0 to 1.4.1
- Update of rootfile
- Changelog
    1.4.1
  - Bug fix: mpc_fr_div: Fix memory leak introduced in release 1.4.0.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 config/rootfiles/common/libmpc | 2 +-
 lfs/libmpc                     | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/config/rootfiles/common/libmpc b/config/rootfiles/common/libmpc
index 60e08c62d..172115082 100644
--- a/config/rootfiles/common/libmpc
+++ b/config/rootfiles/common/libmpc
@@ -3,6 +3,6 @@
 #usr/lib/libmpc.la
 #usr/lib/libmpc.so
 usr/lib/libmpc.so.3
-usr/lib/libmpc.so.3.4.0
+usr/lib/libmpc.so.3.4.1
 #usr/lib/pkgconfig/mpc.pc
 #usr/share/info/mpc.info
diff --git a/lfs/libmpc b/lfs/libmpc
index ffdf11ec4..067c40e53 100644
--- a/lfs/libmpc
+++ b/lfs/libmpc
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 1.4.0
+VER        = 1.4.1
 
 THISAPP    = mpc-$(VER)
 DL_FILE    = $(THISAPP).tar.xz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = d00dbc52a92efd619498671475743c9f35797343c731542f881c04c4a0b198f5b36df51bfde3ce520866d1851958409a6dd0de02d85d7b2e0ba00ccb27a30464
+$(DL_FILE)_BLAKE2 = 793b4cf37e7e805dcbf24bc39903d5d778702e80cf5eac60b840834f09868656856a008cff6b45e7a5a312c3ed21a593d84f45765e9ac456ab3dd38a083acff1
 
 install : $(TARGET)
 
-- 
2.54.0

[PATCH] libpng: Update to version 1.6.58

[Adolf Belka]

- Update from version 1.6.56 to 1.6.58
- Update of rootfile
- CVE fix applied in 1.6.57
- Changelog
    1.6.58
  Fixed a regression introduced in version 1.6.56 that caused `png_get_PLTE`
    to return stale palette data after applying gamma and background transforms
    in-place.
    (Reported by ralfjunker <ralfjunker@users.noreply.github.com>.)
    1.6.57
  Fixed CVE-2026-34757 (medium severity):
    Use-after-free in `png_set_PLTE`, `png_set_tRNS` and `png_set_hIST`
    leading to corrupted chunk data and potential heap information disclosure.
    Also hardened the append-style setters (`png_set_text`, `png_set_sPLT`,
    `png_set_unknown_chunks`) against a theoretical variant of the same
    aliasing pattern.
    (Reported by Iv4n <Iv4n550@users.noreply.github.com>.)
  Fixed integer overflow in rowbytes computation in read transforms.
    (Contributed by Mohammad Seet.)

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 config/rootfiles/common/libpng | 2 +-
 lfs/libpng                     | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/config/rootfiles/common/libpng b/config/rootfiles/common/libpng
index c19c261c5..ef7d888f3 100644
--- a/config/rootfiles/common/libpng
+++ b/config/rootfiles/common/libpng
@@ -16,7 +16,7 @@ usr/lib/libpng.so
 #usr/lib/libpng16.la
 usr/lib/libpng16.so
 usr/lib/libpng16.so.16
-usr/lib/libpng16.so.16.56.0
+usr/lib/libpng16.so.16.58.0
 #usr/lib/pkgconfig/libpng.pc
 #usr/lib/pkgconfig/libpng16.pc
 #usr/share/man/man3/libpng.3
diff --git a/lfs/libpng b/lfs/libpng
index d65a5d86e..6aa7fbee9 100644
--- a/lfs/libpng
+++ b/lfs/libpng
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 1.6.56
+VER        = 1.6.58
 
 THISAPP    = libpng-$(VER)
 DL_FILE    = $(THISAPP).tar.xz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = f653a3177e0910fc156a792d5522fc2a0c04ce0bb43eabb68e06922303dcf6062d8f9b570440bfe1a94ac1b901ef6e9c32b6882d0f4a406e5a9090ea3396f89a
+$(DL_FILE)_BLAKE2 = 51042e8f2b56d469b516db9cbde6d4b6813a62d1b7117898ba32a9a5ac5cd73832c627d7377745e5d5154aade6ec6928fc6b9cd9b96885f64b7ca7df19ca40ec
 
 install : $(TARGET)
 
-- 
2.54.0

[PATCH] libsodium: Update to version 1.0.22

[Adolf Belka]

- Update from version 1.0.21 to 1.0.22
- Update of rootfile
- Patch fix for arm build has been integrated into the tarball in this version
- Changelog
1.0.22
 - Post-quantum key encapsulation is now available. ML-KEM768, the
NIST-standardized lattice-based KEM, is accessible through the
`crypto_kem_mlkem768_*()` functions.
 - X-Wing, a hybrid KEM combining ML-KEM768 with X25519 for protection
against both classical and quantum adversaries, is available through the
`crypto_kem_*()` functions. X-Wing is the recommended KEM for most
applications.
 - SHA-3 hash functions are now available as `crypto_hash_sha3256_*()`
and `crypto_hash_sha3512_*()`, with both one-shot and streaming APIs.
1.0.21-stable
 - Performance: NEON optimizations for Argon2 on ARM platforms.
 - Performance: SHA3 (Keccak1600) now leverages ARM SHA3 instructions when
available on ARM platforms.
 - Performance: WebAssembly SIMD implementations of Argon2 have been added.
 - Emscripten: LTO is now disabled. With Emscripten 4, LTO produced
WebAssembly modules with functions that ran significantly slower than
without it.
 - Emscripten: a new option allows compilation with SIMD support.
 - Emscripten: native ESM module generation is now supported.
 - JavaScript sumo builds now allow up to 80 MiB memory usage, so that
`crypto_pwhash` with the interactive settings can be used in pure
JavaScript, not just WebAssembly.
 - XOF state alignment has been relaxed.
 - `crypto_core_keccak1600_state` has been added.
 - Export missing `crypto_ipcrypt_nd_keygen()` helper function.
 - `crypto_auth_hmacsha256_init` and `crypto_auth_hmacsha512_init` now
accept NULL key pointers (with a zero key length), for consistency with
other `_init` functions.
 - apple-xcframework: headers are now in a Clibsodium subdirectory
to prevent module.modulemap collisions with other xcframeworks.
 - Fixed compilation with GCC on aarch64 and gcc 4.x.
 - On aarch64, aes256-gcm is now enabled even when not using clang,
including MSVC.
 - Added compatibility with Visual Studio 2026 when toolsets do not
define PlatformToolsetVersion.
 - Libsodium can be directly used as a dependency in a Zig project.
 - Performance of MSVC builds has been improved.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 config/rootfiles/common/libsodium             |  6 +++-
 lfs/libsodium                                 |  7 ++--
 ..._fix_compilation_with_GCC_on_aarch64.patch | 33 -------------------
 3 files changed, 8 insertions(+), 38 deletions(-)
 delete mode 100644 src/patches/libsodium-1.0.21_fix_compilation_with_GCC_on_aarch64.patch

diff --git a/config/rootfiles/common/libsodium b/config/rootfiles/common/libsodium
index 423fabba1..02501408d 100644
--- a/config/rootfiles/common/libsodium
+++ b/config/rootfiles/common/libsodium
@@ -25,12 +25,16 @@
 #usr/include/sodium/crypto_generichash_blake2b.h
 #usr/include/sodium/crypto_hash.h
 #usr/include/sodium/crypto_hash_sha256.h
+#usr/include/sodium/crypto_hash_sha3.h
 #usr/include/sodium/crypto_hash_sha512.h
 #usr/include/sodium/crypto_ipcrypt.h
 #usr/include/sodium/crypto_kdf.h
 #usr/include/sodium/crypto_kdf_blake2b.h
 #usr/include/sodium/crypto_kdf_hkdf_sha256.h
 #usr/include/sodium/crypto_kdf_hkdf_sha512.h
+#usr/include/sodium/crypto_kem.h
+#usr/include/sodium/crypto_kem_mlkem768.h
+#usr/include/sodium/crypto_kem_xwing.h
 #usr/include/sodium/crypto_kx.h
 #usr/include/sodium/crypto_onetimeauth.h
 #usr/include/sodium/crypto_onetimeauth_poly1305.h
@@ -75,5 +79,5 @@
 #usr/lib/libsodium.la
 #usr/lib/libsodium.so
 usr/lib/libsodium.so.26
-usr/lib/libsodium.so.26.3.0
+usr/lib/libsodium.so.26.4.0
 #usr/lib/pkgconfig/libsodium.pc
diff --git a/lfs/libsodium b/lfs/libsodium
index 8f6605643..31604274d 100644
--- a/lfs/libsodium
+++ b/lfs/libsodium
@@ -24,10 +24,10 @@
 
 include Config
 
-VER        = 1.0.21
+VER        = 1.0.22
 
 THISAPP    = libsodium-$(VER)
-DL_FILE    = $(THISAPP).tar.gz
+DL_FILE    = $(THISAPP).tar.bz2
 DL_FROM    = $(URL_IPFIRE)
 DIR_APP    = $(DIR_SRC)/$(THISAPP)
 TARGET     = $(DIR_INFO)/$(THISAPP)
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = df68159bbf0b5198ab185e93857b4f07af1d4aa7ffd178b7cb78ff5b020b6ee93ab5c3e71f59812b79906ff4df19e42845435c2bc22bbe8b0a0804076b0ddd05
+$(DL_FILE)_BLAKE2 = 054878d42c67a5bb0e65adea6746668cd768e3650a164e3b33b8d68361a824fa37f7cadd8cce60f4ba5a25921f4910380b8ea95992c2b4c34160937005277cd4
 
 install : $(TARGET)
 
@@ -73,7 +73,6 @@ $(subst %,%_BLAKE2,$(objects)) :
 $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
 	@$(PREBUILD)
 	@rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar axf $(DIR_DL)/$(DL_FILE)
-	cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/libsodium-1.0.21_fix_compilation_with_GCC_on_aarch64.patch
 	cd $(DIR_APP) && ./configure \
 				--prefix=/usr \
 				--disable-static
diff --git a/src/patches/libsodium-1.0.21_fix_compilation_with_GCC_on_aarch64.patch b/src/patches/libsodium-1.0.21_fix_compilation_with_GCC_on_aarch64.patch
deleted file mode 100644
index 1ffdbd088..000000000
--- a/src/patches/libsodium-1.0.21_fix_compilation_with_GCC_on_aarch64.patch
+++ /dev/null
@@ -1,33 +0,0 @@
-diff --git a/src/libsodium/crypto_ipcrypt/ipcrypt_armcrypto.c b/src/libsodium/crypto_ipcrypt/ipcrypt_armcrypto.c
-index c5a27e92ec..bad4ce3898 100644
---- a/src/libsodium/crypto_ipcrypt/ipcrypt_armcrypto.c
-+++ b/src/libsodium/crypto_ipcrypt/ipcrypt_armcrypto.c
-@@ -37,7 +37,7 @@ typedef uint64x2_t BlockVec;
- #    define XOR128_3(a, b, c) veorq_u64(veorq_u64((a), (b)), (c))
- #    define SET64x2(a, b)     vsetq_lane_u64((uint64_t) (a), vmovq_n_u64((uint64_t) (b)), 1)
- #    define BYTESHL128(a, b) \
--        vreinterpretq_u64_u8(vextq_s8(vdupq_n_s8(0), vreinterpretq_s8_u64(a), 16 - (b)))
-+        vreinterpretq_u64_u8(vextq_u8(vdupq_n_u8(0), vreinterpretq_u8_u64(a), 16 - (b)))
- 
- #    define AES_XENCRYPT(block_vec, rkey) \
-         vreinterpretq_u64_u8(             \
-@@ -348,12 +348,12 @@ pfx_set_bit(uint8_t ip16[16], const unsigned int bit_index, const uint8_t bit_va
- static void
- pfx_shift_left(uint8_t ip16[16])
- {
--    BlockVec       v       = LOAD128(ip16);
--    const BlockVec shl     = vshlq_n_u8(vreinterpretq_u8_u64(v), 1);
--    const BlockVec msb     = vshrq_n_u8(vreinterpretq_u8_u64(v), 7);
--    const BlockVec zero    = vdupq_n_u8(0);
--    const BlockVec carries = vextq_u8(vreinterpretq_u8_u64(msb), zero, 1);
--    v                      = vreinterpretq_u64_u8(vorrq_u8(shl, carries));
-+    BlockVec         v       = LOAD128(ip16);
-+    const uint8x16_t shl     = vshlq_n_u8(vreinterpretq_u8_u64(v), 1);
-+    const uint8x16_t msb     = vshrq_n_u8(vreinterpretq_u8_u64(v), 7);
-+    const uint8x16_t zero    = vdupq_n_u8(0);
-+    const uint8x16_t carries = vextq_u8(msb, zero, 1);
-+    v                        = vreinterpretq_u64_u8(vorrq_u8(shl, carries));
-     STORE128(ip16, v);
- }
- 
-
-- 
2.54.0

[PATCH] libxml2: Update to version 2.15.3

[Adolf Belka]

- Update from version 2.15.1 to 2.15.3
- Update of rootfile
- Five CVE fixes applied in 2.15.2
- Changelog
2.15.3
Security
- parser: Pass userData to SAX text callbacks in xmlParseReference (type-confusion)
- entities: copy children in xmlCopyEntity
- c14n: Fix Type confusion in xmlC14NProcessAttrsAxis
- python: Do not decref string after adding to the list (double-free / use-after-free)
- c14n: Reuse tmp_str, xmlStrcat reallocates *cur (double-free)
Improvements
- schemas: Fix relative schemaLocation resolution in XSI assembly in streaming mode
- xmlreader: propagate reader resource loaders to validator parsers
- python: Make python bindings python2 compatible
- xmlregexp: Fix escape-sequence character range matching
- xmlreader: Free input in xmlReaderForFd (memory-leak)
- xmlstring: Free cur on every error for xmlStrncat (memory-leak)
- catalog: Free xmlCatalogResolveCache on cleanup (memory leak)
- Fix nanohttp.c build when --without-output
- test: fix mismatched signed/unsigned comparison
2.15.2
Security
- CVE-2026-1757 fix: Memory leak in xmllint Shell - shell.c
- CVE-2026-0990 fix: Prevent infinite recursion in
  xmlCatalogListXMLResolve
- CVE-2026-0992 fix: Exponential behavior when handling
- parser: Fix infinite loop in xmlCtxtParseContent
- CVE-2025-10911 libxslt related: Ignore next/prev of documents when
  traversing XPath
- CVE-2026-0989 fix: Add RelaxNG include limit
- xmlIO: use size_t for buffer size reallocation
- uri: fix signed integer overflow in xmlBuildRelativeURISafe
- schematron: fix memory leaks on error paths in xmlSchematronParseRule
- catalog: fix stack overflow from self-referencing SGML CATALOG entries
Improvements
- fuzz: Make fuzzy encoding match more lenient
- Fix C14N type confusion
- meson: Fix build with Meson < 1.3
- xmllint: Use zlib directly
- xmllint: New option to separate xpath results using null, --xpath0
- autotools: Make valgrind actually check for leaks
- meson: Add valgrind test setup
- Fix xmlOutputBufferGetContent output when encoder is set
- threads: don't force _WIN32_WINNT to Vista if it's set to a higher value
- dist: Add generated documentation to the dist as "dist-doc" folder
  to simplify downstream packaging of doc
- Fix xmlRemoveEntity removing from wrong hash table
- use duplicating variant in relaxng to mitigate UAF
- Fix memory leak in xmlTextWriterStartAttributeNS on OOM
- meson: remove hardcoded buildtype=debug default
- Fix memory leak of prefix in xmlTextWriterStartElementNS()
- writer: Add a few extra NULL checks to avoid memory leaks on corrupt
  writer path.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 config/rootfiles/common/libxml2 | 2 +-
 lfs/libxml2                     | 6 +++---
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/config/rootfiles/common/libxml2 b/config/rootfiles/common/libxml2
index 779b249ea..5a4f85793 100644
--- a/config/rootfiles/common/libxml2
+++ b/config/rootfiles/common/libxml2
@@ -54,5 +54,5 @@
 #usr/lib/libxml2.la
 #usr/lib/libxml2.so
 usr/lib/libxml2.so.16
-usr/lib/libxml2.so.16.1.1
+usr/lib/libxml2.so.16.1.3
 #usr/lib/pkgconfig/libxml-2.0.pc
diff --git a/lfs/libxml2 b/lfs/libxml2
index c1ea739eb..84ebb0a0a 100644
--- a/lfs/libxml2
+++ b/lfs/libxml2
@@ -1,7 +1,7 @@
 ###############################################################################
 #                                                                             #
 # IPFire.org - A linux based firewall                                         #
-# Copyright (C) 2007-2025  IPFire Team  <info@ipfire.org>                     #
+# Copyright (C) 2007-2026  IPFire Team  <info@ipfire.org>                     #
 #                                                                             #
 # This program is free software: you can redistribute it and/or modify        #
 # it under the terms of the GNU General Public License as published by        #
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 2.15.1
+VER        = 2.15.3
 #          https://download.gnome.org/sources/libxml2/
 
 THISAPP    = libxml2-$(VER)
@@ -43,7 +43,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 73c4d17adacda67d71c5a120c7de2324df1db35963cadbe18166dafe122e1f10dcab9d4fed0e128c077a5ca31432bfaf72f742c42680251660d397ab8bc3538b
+$(DL_FILE)_BLAKE2 = 2ff478b46a40957386cd1ed0627bfc0f2433f47e786f20db3942304c90289adaeb1d9c3f12665df312b86cfac42f8e4dbc18e965bf90018f93c230b9b862df66
 
 install : $(TARGET)
 
-- 
2.54.0

[PATCH] parted: Update to version 3.7

[Adolf Belka]

- Update from version 3.6 to 3.7
- Update of rootfile
- Changelog
3.7
  Promoting alpha release to stable release 3.7
3.6.37
New Features
   hurd: Support USB device names
Bug Fixes
   Stop adding boot code into the MBR if it's zero when updating an
    existing msdos partition table.
   disk.c: Update metadata after reading partition table
   Fix initialization of atr_c_locale inside PED_ASSERT
   nilfs2: Fixed possible sigsegv in case of corrupted superblock
   libparted: Do not detect ext4 without journal as ext2
   libparted: Fix dvh disklabel unhandled exception
   libparted: Fix sun disklabel unhandled exception
   parted: fix do_version declaration to work with gcc 15
   libparted: Fail early when detecting nilfs2
   doc: Document IEC unit behavior in the manpage
   parted: Print the Fixing... message to stderr
   docs: Finish setup of libparted API docs
   libparted: link libparted-fs-resize.so to libuuid

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 config/rootfiles/common/parted |  1 +
 lfs/parted                     | 10 ++++++----
 2 files changed, 7 insertions(+), 4 deletions(-)

diff --git a/config/rootfiles/common/parted b/config/rootfiles/common/parted
index bfd65096e..61063d3b2 100644
--- a/config/rootfiles/common/parted
+++ b/config/rootfiles/common/parted
@@ -30,6 +30,7 @@ usr/sbin/partprobe
 #usr/share/locale/da/LC_MESSAGES/parted.mo
 #usr/share/locale/de/LC_MESSAGES/parted.mo
 #usr/share/locale/es/LC_MESSAGES/parted.mo
+#usr/share/locale/fi/LC_MESSAGES/parted.mo
 #usr/share/locale/fr/LC_MESSAGES/parted.mo
 #usr/share/locale/fur/LC_MESSAGES/parted.mo
 #usr/share/locale/gl/LC_MESSAGES/parted.mo
diff --git a/lfs/parted b/lfs/parted
index b3632a3c0..ff48a62ec 100644
--- a/lfs/parted
+++ b/lfs/parted
@@ -1,7 +1,7 @@
 ###############################################################################
 #                                                                             #
 # IPFire.org - A linux based firewall                                         #
-# Copyright (C) 2007-2023  IPFire Team  <info@ipfire.org>                     #
+# Copyright (C) 2007-2026  IPFire Team  <info@ipfire.org>                     #
 #                                                                             #
 # This program is free software: you can redistribute it and/or modify        #
 # it under the terms of the GNU General Public License as published by        #
@@ -26,7 +26,7 @@ include Config
 
 SUMMARY    = GNU partitioner
 
-VER        = 3.6
+VER        = 3.7
 
 THISAPP    = parted-$(VER)
 DL_FILE    = $(THISAPP).tar.xz
@@ -45,7 +45,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 99b6d096e4db05144c98e9f0a9a97c647aa911ee5df031244b03d5223f709d43d9302cef12dd4b2f97f42ec476510561b7f8b3b1ef7cb09d0a7c4d512e7a6739
+$(DL_FILE)_BLAKE2 = 967a2c5e6f8d93bd8eff2fe9092413582437c7d33fb151ca5230c8acd0c32e94c90edcb83abed888da560f7fbfcc77ee31cda54ddc3c1af24b1a1c522ab83bca
 
 install : $(TARGET)
 
@@ -76,7 +76,9 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
 	@$(PREBUILD)
 	@rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar axf $(DIR_DL)/$(DL_FILE)
 	$(UPDATE_AUTOMAKE)
-	cd $(DIR_APP) && ./configure --prefix=/usr --disable-device-mapper
+	cd $(DIR_APP) && ./configure \
+				--prefix=/usr \
+				--disable-device-mapper
 	cd $(DIR_APP) && make $(MAKETUNING)
 	cd $(DIR_APP) && make install
 	@rm -rf $(DIR_APP)
-- 
2.54.0

[PATCH] pciutils: Update to version 3.15.0

[Adolf Belka]

- Update from version 3.14.0 to 3.15.0
- Update of rootfile
- Changelog
3.15.0
	* New capabilities are decoded: MMIO Register Block Locator,
	  Flit Error Injection, Flit Logging.
	* Decoding of PCIe capabilities updated to Gen7.
	* Both lspci and setpci warn when the "-s" or "-d" option
	  is given multiple times.
	* Improved display of interrupts in "lspci -vv". Routing of
	  interrupt pins is shown only if the pins are not disabled.
	  Routing of MSI(X) interrupts is shown when available
	  (which is currently supported by the sysfs back-end only).
	* Minor improvements to Windows back-ends.
	* The dump back-end can read the dump from stdin when given "-"
	  as a file name.
	* FreeBSD supports 64-bit addresses.
	* Added README.DJGPP.
	* Updated pci.ids.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 config/rootfiles/common/pciutils | 2 +-
 lfs/pciutils                     | 6 +++---
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/config/rootfiles/common/pciutils b/config/rootfiles/common/pciutils
index 49347ad35..abe1a7b67 100644
--- a/config/rootfiles/common/pciutils
+++ b/config/rootfiles/common/pciutils
@@ -1,7 +1,7 @@
 bin/lspci
 bin/setpci
 lib/libpci.so.3
-lib/libpci.so.3.14.0
+lib/libpci.so.3.15.0
 sbin/update-pciids
 #usr/include/pci
 #usr/include/pci/config.h
diff --git a/lfs/pciutils b/lfs/pciutils
index 5d529692f..9e46e4ca3 100644
--- a/lfs/pciutils
+++ b/lfs/pciutils
@@ -1,7 +1,7 @@
 ###############################################################################
 #                                                                             #
 # IPFire.org - A linux based firewall                                         #
-# Copyright (C) 2007-2025  IPFire Team  <info@ipfire.org>                     #
+# Copyright (C) 2007-2026  IPFire Team  <info@ipfire.org>                     #
 #                                                                             #
 # This program is free software: you can redistribute it and/or modify        #
 # it under the terms of the GNU General Public License as published by        #
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 3.14.0
+VER        = 3.15.0
 
 THISAPP    = pciutils-$(VER)
 DL_FILE    = $(THISAPP).tar.gz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 3ab270c4523cc1968d5f3a03d2564eff5560b60eb8307bafe44ee240a6636dc676fbf0a28effe3c9abc99bfc86a975aea066d634a5e5adaffb2c63ba226511d9
+$(DL_FILE)_BLAKE2 = 29d3d38be6a3b8abce8db86e9160fc27ce966375f2ea441dff20cad9d7f7dfebe42a17d6054a406ed0d52035ad9c9071837e0e7650c954ff1c84514554f6c34f
 
 install : $(TARGET)
 
-- 
2.54.0

[PATCH] texinfo: Update to version 7.3

[Adolf Belka]

- Update from version 7.2 to 7.3
- Update of rootfile
- Changelog
7.3
* Language
  . new commands for title page creation: @documentinfo, @publication,
    and @maketitle.  you can use these instead of explicit formatting
    inside @titlepage.
  . you can use heading commands such as @heading after @node.  nodes
    defined this way are not part of the chapter structure of the document
    (unlike if @section etc. were used).
  . new command @xrefname can follow @node in place of a heading command.
    this is for when you do not want any heading at all to be displayed.
  . new command @namedanchor for defining text to be used for a cross-
    reference to an anchor (with @xrefautomaticsectiontitle on)
  . new command @thispart to print part name in headings or footings
  . deprecate @clickstyle
  . if there is no @documentlanguage, the language is unspecified, rather
    than en_US.  (texi2any will still use English strings by default,
    but will not put en_US in the output, depending on output format.)
* texi2any
  . texi2any uses the Perl extensions in C for converters when possible,
    which results in a large speed-up for HTML output.
    set the `TEXINFO_XS_CONVERT' environment variable to 0 for pure Perl.
  . optional experimental texi2any program implementation in C embedding Perl.
    use --enable-using-c-texi2any to prefer the C implementation.
  . report leading directory components of input file names in messages
    (this reverses 6.8 release change, 2021).
  . when CHECK_NORMAL_MENU_STRUCTURE is on, give the line number of the
    problem menu entry
  . DUMP_TREE should now be a file name, or - to output to standard error
  . remove USE_REL_REV variable; former effect is now always on
  . (API only) rename LINKS_BUTTONS customization variable to LINKS_DIRECTIONS
  . (API only) rename space direction ' ' to 'Space'
  . HTML output:
      . the HIGHLIGHT_SYNTAX variable can be used for syntax highlighting
        of code samples.  this feature was present in earlier releases but
        is no longer marked as experimental.
      . do not wrap the contents of <style> elements in an HTML comment,
        as this is no longer needed for browser compatibility
      . the --transliterate-file-names option (which sets the
        TRANSLITERATE_FILE_NAMES variable) is now off by default.
      . when creating redirection files with --node-files (the default),
        ignore the settings of TRANSLITERATE_FILE_NAMES, BASEFILENAME_LENGTH,
        and EXTENSION.
      . likewise, ignore these variables for links to external manuals
        (they are still used for the file names generated for the
        converted manual content).
      . the default setting of WORDS_IN_PAGE has changed from 300 to 200.
        this means that a navigation panel is more likely to be output at
        the bottom of fairly short nodes.
      . use the last @printindex in the input file for the Index direction
      . only output 'accesskey' attributes when splitting by node
      . for locations of external manuals, use files ending with the
        .cnf extension in the htmlxref.d directories (in addition to files
        called htmlxref.cnf).  this should make it easier to combine
        information on HTML cross-references from different sources.
      . in an htmlxref file, you can explicity trigger a link to a local
        manual by using an empty URL
      . you can set FORMAT_MENU to 'menu_no_detailmenu' to omit an
        automatically generated @detailmenu from the Top node
      . info.js (with INFO_JS_DIR) fixes and improvements:
          . avoid pop-up over Top node and display the correct title
      . --internal-links outputs more types of internal link, including
        anchors, sections and floats.  the possible type names reported
        in the second column have changed.
      . USE_NEXT_HEADING_FOR_LONE_NODE removed.  former effect is now
        always on.
      . (API only) remove the buttons specifications with scalar references,
        direction text or functions references should be used instead
      . (API only) remove the Texinfo::TeX4HT customization package
  . Info output:
      . new experimental variable INFO_MATH_IMAGES allows outputting
        images for mathematics notation
  . LaTeX output:
      . use UTF-8 encoding for output by default, regardless of input
        encoding.  override with OUTPUT_ENCODING_NAME.
  . XML output:
      . use HTML entities names for @H and @dotaccent accents types
* texinfo.tex
  . add entries in PDF outline for index initials
  . use Unicode in PDF outline for input documents encoded in UTF-8
  . '@set xrefautomaticsectiontitle on' does not affect cross-references
     to anchors, matching the HTML output
  . separate adjacent footnote markers with commas, e.g. '1, 2' not '1 2'
* info
  . you can use hook scripts to handle an info manual not being found.
    these hooks can provide a message to the user with information on
    how to install the manual.
  . when run as 'info TOPIC INDEX-ENTRY', prefer index entries that
    refer to the node that would be loaded by 'info TOPIC'.  this aids
    in retrieving documentation of command-line options when multiple
    programs are documented in the same manual.
    for example, 'info cp -- -s' goes to the documentation of the -s
    option for the cp program in the coreutils manual, rather than the
    -s option of any other program.
  . list all customizable variables in help buffer including how they
    got their values
  . reuse introductory text in dir file rather than supplying our own text,
    as was the case in older version of info and is the case in Emacs
  . removed fallback if a node is not found in a cross-reference to
    searching for a file of the same name.  e.g. "* Foo::" in a menu
    would go to a file called "Foo", if no node called "Foo" was found.
    now only the node is looked for.
  . new variable 'raw-utf8-output' supports viewing UTF-8 Info files
    on MS-Windows
* Distribution
  . automake 1.18.1, autoconf 2.72, gettext 0.26, libtool 2.5.4
  . support for DJGPP removed

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 config/rootfiles/common/texinfo | 107 ++++++++++++++++++++++----------
 lfs/texinfo                     |   6 +-
 2 files changed, 76 insertions(+), 37 deletions(-)

diff --git a/config/rootfiles/common/texinfo b/config/rootfiles/common/texinfo
index ae804b31e..99069ae4a 100644
--- a/config/rootfiles/common/texinfo
+++ b/config/rootfiles/common/texinfo
@@ -8,39 +8,57 @@
 #usr/bin/texi2pdf
 #usr/bin/texindex
 #usr/lib/texi2any
-#usr/lib/texi2any/ConvertXS.la
-#usr/lib/texi2any/ConvertXS.so
-#usr/lib/texi2any/DocumentXS.la
-#usr/lib/texi2any/DocumentXS.so
-#usr/lib/texi2any/IndicesXS.la
-#usr/lib/texi2any/IndicesXS.so
-#usr/lib/texi2any/MiscXS.la
-#usr/lib/texi2any/MiscXS.so
-#usr/lib/texi2any/Parsetexi.la
-#usr/lib/texi2any/Parsetexi.so
-#usr/lib/texi2any/StructuringTransfoXS.la
-#usr/lib/texi2any/StructuringTransfoXS.so
-#usr/lib/texi2any/XSParagraph.la
-#usr/lib/texi2any/XSParagraph.so
-#usr/lib/texi2any/libtexinfo-convert.la
-#usr/lib/texi2any/libtexinfo-convert.so
-#usr/lib/texi2any/libtexinfo-convert.so.0
-#usr/lib/texi2any/libtexinfo-convert.so.0.0.0
-#usr/lib/texi2any/libtexinfo-convertxs.la
-#usr/lib/texi2any/libtexinfo-convertxs.so
-#usr/lib/texi2any/libtexinfo-convertxs.so.0
-#usr/lib/texi2any/libtexinfo-convertxs.so.0.0.0
-#usr/lib/texi2any/libtexinfo.la
-#usr/lib/texi2any/libtexinfo.so
-#usr/lib/texi2any/libtexinfo.so.0
-#usr/lib/texi2any/libtexinfo.so.0.0.0
-#usr/lib/texi2any/libtexinfoxs.la
-#usr/lib/texi2any/libtexinfoxs.so
-#usr/lib/texi2any/libtexinfoxs.so.0
-#usr/lib/texi2any/libtexinfoxs.so.0.0.0
+#usr/lib/texi2any/XS_extension
+#usr/lib/texi2any/XS_extension/ConfigXS.la
+#usr/lib/texi2any/XS_extension/ConfigXS.so
+#usr/lib/texi2any/XS_extension/ConvertToTexinfoXS.la
+#usr/lib/texi2any/XS_extension/ConvertToTexinfoXS.so
+#usr/lib/texi2any/XS_extension/ConvertXS.la
+#usr/lib/texi2any/XS_extension/ConvertXS.so
+#usr/lib/texi2any/XS_extension/DocumentXS.la
+#usr/lib/texi2any/XS_extension/DocumentXS.so
+#usr/lib/texi2any/XS_extension/IndicesXS.la
+#usr/lib/texi2any/XS_extension/IndicesXS.so
+#usr/lib/texi2any/XS_extension/MiscXS.la
+#usr/lib/texi2any/XS_extension/MiscXS.so
+#usr/lib/texi2any/XS_extension/Parsetexi.la
+#usr/lib/texi2any/XS_extension/Parsetexi.so
+#usr/lib/texi2any/XS_extension/ReaderXS.la
+#usr/lib/texi2any/XS_extension/ReaderXS.so
+#usr/lib/texi2any/XS_extension/StructuringTransfoXS.la
+#usr/lib/texi2any/XS_extension/StructuringTransfoXS.so
+#usr/lib/texi2any/XS_extension/TreeElementConverterXS.la
+#usr/lib/texi2any/XS_extension/TreeElementConverterXS.so
+#usr/lib/texi2any/XS_extension/TreeElementXS.la
+#usr/lib/texi2any/XS_extension/TreeElementXS.so
+#usr/lib/texi2any/XS_extension/XSParagraph.la
+#usr/lib/texi2any/XS_extension/XSParagraph.so
+#usr/lib/texi2any/lib
+#usr/lib/texi2any/lib/libtexinfo-convert.la
+#usr/lib/texi2any/lib/libtexinfo-convert.so
+#usr/lib/texi2any/lib/libtexinfo-convert.so.1
+#usr/lib/texi2any/lib/libtexinfo-convert.so.1.0.0
+#usr/lib/texi2any/lib/libtexinfo-convertxs.la
+#usr/lib/texi2any/lib/libtexinfo-convertxs.so
+#usr/lib/texi2any/lib/libtexinfo-convertxs.so.1
+#usr/lib/texi2any/lib/libtexinfo-convertxs.so.1.0.0
+#usr/lib/texi2any/lib/libtexinfo-main.la
+#usr/lib/texi2any/lib/libtexinfo-main.so
+#usr/lib/texi2any/lib/libtexinfo-main.so.0
+#usr/lib/texi2any/lib/libtexinfo-main.so.0.0.0
+#usr/lib/texi2any/lib/libtexinfo.la
+#usr/lib/texi2any/lib/libtexinfo.so
+#usr/lib/texi2any/lib/libtexinfo.so.1
+#usr/lib/texi2any/lib/libtexinfo.so.1.0.0
+#usr/lib/texi2any/lib/libtexinfoxs.la
+#usr/lib/texi2any/lib/libtexinfoxs.so
+#usr/lib/texi2any/lib/libtexinfoxs.so.1
+#usr/lib/texi2any/lib/libtexinfoxs.so.1.0.0
 #usr/share/info/info-stnd.info
 #usr/share/info/texi2any_api.info
 #usr/share/info/texi2any_internals.info
+#usr/share/info/texi2any_internals.info-1
+#usr/share/info/texi2any_internals.info-2
 #usr/share/info/texinfo.info
 #usr/share/info/texinfo.info-1
 #usr/share/info/texinfo.info-2
@@ -65,8 +83,11 @@
 #usr/share/texi2any/Texinfo
 #usr/share/texi2any/Texinfo/Commands.pm
 #usr/share/texi2any/Texinfo/Commands.pod
+#usr/share/texi2any/Texinfo/CommandsValues.pm
+#usr/share/texi2any/Texinfo/CommandsValues.pod
 #usr/share/texi2any/Texinfo/Common.pm
 #usr/share/texi2any/Texinfo/Config.pm
+#usr/share/texi2any/Texinfo/ConfigXS.pm
 #usr/share/texi2any/Texinfo/Convert
 #usr/share/texi2any/Texinfo/Convert/ConvertXS.pm
 #usr/share/texi2any/Texinfo/Convert/Converter.pm
@@ -81,12 +102,19 @@
 #usr/share/texi2any/Texinfo/Convert/ParagraphNonXS.pm
 #usr/share/texi2any/Texinfo/Convert/PlainTexinfo.pm
 #usr/share/texi2any/Texinfo/Convert/Plaintext.pm
+#usr/share/texi2any/Texinfo/Convert/ReadDocBook.pm
+#usr/share/texi2any/Texinfo/Convert/TestReader.pm
 #usr/share/texi2any/Texinfo/Convert/Texinfo.pm
 #usr/share/texi2any/Texinfo/Convert/TexinfoMarkup.pm
+#usr/share/texi2any/Texinfo/Convert/TexinfoNonXS.pm
 #usr/share/texi2any/Texinfo/Convert/TexinfoSXML.pm
 #usr/share/texi2any/Texinfo/Convert/TexinfoXML.pm
+#usr/share/texi2any/Texinfo/Convert/TexinfoXS.pm
 #usr/share/texi2any/Texinfo/Convert/Text.pm
 #usr/share/texi2any/Texinfo/Convert/TextContent.pm
+#usr/share/texi2any/Texinfo/Convert/TreeElementConverter.pm
+#usr/share/texi2any/Texinfo/Convert/TreeElementConverterXS.pm
+#usr/share/texi2any/Texinfo/Convert/TreeElementReadDocBook.pm
 #usr/share/texi2any/Texinfo/Convert/Unicode.pm
 #usr/share/texi2any/Texinfo/Convert/Utils.pm
 #usr/share/texi2any/Texinfo/DebugTree.pm
@@ -94,6 +122,7 @@
 #usr/share/texi2any/Texinfo/DocumentXS.pm
 #usr/share/texi2any/Texinfo/Documentlanguages.pm
 #usr/share/texi2any/Texinfo/HTMLData.pm
+#usr/share/texi2any/Texinfo/HTMLDataCSS.pm
 #usr/share/texi2any/Texinfo/Indices.pm
 #usr/share/texi2any/Texinfo/IndicesXS.pm
 #usr/share/texi2any/Texinfo/ManipulateTree.pm
@@ -103,16 +132,20 @@
 #usr/share/texi2any/Texinfo/OutputUnits.pm
 #usr/share/texi2any/Texinfo/Parser.pm
 #usr/share/texi2any/Texinfo/ParserNonXS.pm
+#usr/share/texi2any/Texinfo/Reader.pm
+#usr/share/texi2any/Texinfo/ReaderNonXS.pm
 #usr/share/texi2any/Texinfo/Report.pm
 #usr/share/texi2any/Texinfo/StructTransfXS.pm
 #usr/share/texi2any/Texinfo/Structuring.pm
 #usr/share/texi2any/Texinfo/Tests.pm
 #usr/share/texi2any/Texinfo/Transformations.pm
 #usr/share/texi2any/Texinfo/Translations.pm
-#usr/share/texi2any/Texinfo/XS
-#usr/share/texi2any/Texinfo/XS/parsetexi
-#usr/share/texi2any/Texinfo/XS/parsetexi/Parsetexi.pm
+#usr/share/texi2any/Texinfo/TreeElement.pm
+#usr/share/texi2any/Texinfo/TreeElementNonXS.pm
+#usr/share/texi2any/Texinfo/UnicodeData.pm
 #usr/share/texi2any/Texinfo/XSLoader.pm
+#usr/share/texi2any/XSTexinfo
+#usr/share/texi2any/XSTexinfo/Parsetexi.pm
 #usr/share/texi2any/ext
 #usr/share/texi2any/ext/epub3.pm
 #usr/share/texi2any/ext/highlight_syntax.pm
@@ -546,7 +579,13 @@
 #usr/share/texi2any/lib/libintl-perl/lib/Locale/Util.pm
 #usr/share/texi2any/lib/libintl-perl/lib/Locale/gettext_dumb.pm
 #usr/share/texi2any/lib/libintl-perl/lib/Locale/gettext_pp.pm
+#usr/share/texi2any/load_txi_modules
 #usr/share/texinfo
-#usr/share/texinfo/htmlxref.cnf
+#usr/share/texinfo/htmlxref.d
+#usr/share/texinfo/htmlxref.d/Texinfo_GNU.cnf
+#usr/share/texinfo/htmlxref.d/Texinfo_nonGNU.cnf
+#usr/share/texinfo/info-hooks
+#usr/share/texinfo/info-hooks/gnu-manuals-locations.dat
+#usr/share/texinfo/info-hooks/manual-not-found
 #usr/share/texinfo/texindex.awk
 #usr/share/texinfo/texinfo.dtd
diff --git a/lfs/texinfo b/lfs/texinfo
index 588704782..e0badb760 100644
--- a/lfs/texinfo
+++ b/lfs/texinfo
@@ -1,7 +1,7 @@
 ###############################################################################
 #                                                                             #
 # IPFire.org - A linux based firewall                                         #
-# Copyright (C) 2007-2025  IPFire Team  <info@ipfire.org>                     #
+# Copyright (C) 2007-2026  IPFire Team  <info@ipfire.org>                     #
 #                                                                             #
 # This program is free software: you can redistribute it and/or modify        #
 # it under the terms of the GNU General Public License as published by        #
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 7.2
+VER        = 7.3
 
 THISAPP    = texinfo-$(VER)
 DL_FILE    = $(THISAPP).tar.xz
@@ -50,7 +50,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = fc6bd020310a437a73d5723d257ca3da1d15329e9e668fa78c49ac77759c2c990d4422c2a7071b217ea214b88389a0cbb43d3fcfa5fe9bf9651270167b15c342
+$(DL_FILE)_BLAKE2 = e9c17aec5ebf9d22eb22b40a06a24de675fca6d511f448170983d474b0906e23c25a00b75907b260abf66e660aefa6d6af928a1785bcf9b2099a0e791aac7025
 
 install : $(TARGET)
 
-- 
2.54.0