Weekly portage-stable package updates 2024-08-12

[github-actions]

CI: http://jenkins.infra.kinvolk.io:8080/job/container/job/sdk/1659/cldsv/

Closes flatcar/Flatcar#1098
Closes flatcar/Flatcar#1511

At first sys-apps/kexec-tools seemed to be broken. kexec.service was updated to run kexec-auto-load, but the script was not installed. Chewi has opened Gentoo bug #937822. The bug is closed, the package got resynced, and nothing interesting is changed, thus the package is removed from the listing below.

--

• app-arch/lz4: [PROD] [DEV]

  • from 1.9.4 to 1.10.0-r1
  • release notes: https://github.com/lz4/lz4/releases/tag/v1.10.0

• app-containers/aardvark-dns: [SYSEXT-PODMAN]

  • still at 1.11.0
  • stabilised in Gentoo

• app-crypt/adcli: [PROD] [DEV]

  • still at 0.9.2
  • stabilised on amd64 in Gentoo
  • Chewi's cross-compile fix

• app-crypt/gpgme: [SYSEXT-PODMAN]

  • still at 1.23.2
  • Chewi's cross-compile fix

• dev-lang/nasm:

  • from 2.16.01-r1 to 2.16.03
  • release notes: https://www.nasm.us/pub/nasm/releasebuilds/2.16.03/doc/html/nasmdocc.html#section-C.1.1 https://www.nasm.us/pub/nasm/releasebuilds/2.16.02/doc/html/nasmdocc.html#section-C.1.1

• dev-lang/python: [AZURE] [DEV] [GCE] [SYSEXT-PYTHON]

  • from 3.11.9-r1 to 3.11.9_p1
  • unstable for amd64, so added accept keywords to overlay profiles
  • added an extra Gentoo patch with a fix for email header encoding issue

• dev-lang/yasm:

  • from 1.3.0-r1 to 1.3.0-r2
  • EAPI 8

• dev-libs/elfutils: [PROD] [DEV]

  • from 0.190 to 0.191-r1
  • release notes: https://inbox.sourceware.org/elfutils-devel/CAJDtP-SJhJ8cjTpkNpi+F0nzVJ2pZsEai8Ewpp4yJmsO_H5-NA@mail.gmail.com/T/#u

• dev-libs/npth: [PROD] [DEV]

  • from 1.6-r1 to 1.7-r1
  • EAPI 8
  • release notes: https://git.gnupg.org/cgi-bin/gitweb.cgi?p=npth.git;a=blob;f=NEWS;h=c1b631b4294eabfef29baefd60e1b0dfecce710d;hb=75c68399ef3bbb5d024f2a60474a7214fa479016

• dev-python/certifi: [SYSEXT-PYTHON]

  • from 3021.3.16-r4 to 3024.7.22
  • EAPI 8
  • release notes: https://github.com/projg2/certifi-system-store/commits/v3024.7.22/

• dev-python/ensurepip-setuptools: [AZURE] [DEV] [GCE] [SYSEXT-PYTHON]

  • from 70.3.0 to 71.1.0
  • release notes: https://github.com/pypa/setuptools/blob/v71.1.0/NEWS.rst

• dev-python/jaraco-text: [GCE] [SYSEXT-PYTHON]

  • from 3.12.1 to 3.14.0
  • release notes: https://github.com/jaraco/jaraco.text/blob/v3.14.0/NEWS.rst

• dev-python/setuptools: [GCE] [SYSEXT-PYTHON]

  • from 70.3.0 to 71.1.0
  • release notes: https://github.com/pypa/setuptools/blob/v71.1.0/NEWS.rst

• dev-util/re2c:

  • from 2.2 to 3.1
  • fixes CVE-2022-23901
    • update: re2c Flatcar#1098
  • release notes: https://re2c.org/releases/release_notes.html#release-3-1 https://re2c.org/releases/release_notes.html#release-3-0

• eclass/dist-kernel-utils.eclass:

  • fixed some issues with installing modules from binpkgs

• eclass/java-utils-2.eclass:

  • nothing interesting

• eclass/python-any-r1.eclass:

  • run sanity checks on setup

• eclass/python-r1.eclass:

  • run sanity checks on setup

• eclass/python-single-r1.eclass:

  • run sanity checks on setup

• eclass/rust-toolchain.eclass:

  • added some powerpc musl stuff, not interesting

• eclass/toolchain-funcs.eclass:

  • new tc-has-64bit-time_t function
  • fixed tc-is-lto function by cleaning up after itself

• eclass/toolchain.eclass:

  • some improvements for testing

• net-libs/libmicrohttpd: [PROD] [DEV]

  • from 0.9.77 to 1.0.1-r1
  • new USE flags, debug and verify-sig, obvious meanings
  • release notes: https://lists.gnu.org/archive/html/libmicrohttpd/2024-02/msg00005.html https://lists.gnu.org/archive/html/libmicrohttpd/2024-02/msg00000.html

• net-misc/curl: [PROD] [DEV]

  • from 8.9.0 to 8.9.1-r1
  • fixes CVE-2024-7264
    • update: curl Flatcar#1511
  • marked the USE flags http3, quic and curl_quic_openssl as enabled-by-default
    • we disable them, they are masked for non-amd64 arches and are pulling in some extra package
  • bumped net-libs/nghttp2 dependency from >=1.12.0 to >=1.15.0
  • release notes: https://curl.se/ch/8.9.1.html

• profiles:

  • dev-libs/glib >=2.80 masked (new version got some circular deps)

• sys-fs/btrfs-progs: [PROD] [DEV]

  • still at 6.9.2
  • added experimental USE flag
    • adds some btrfs-corrupt-block
    • we are not enabling it

--

• changelog
• image diff

[chewi]

Don't you need to do something about kexec-tools? Either drop the changes or take the new fix from Gentoo?

[krnowak]

Don't you need to do something about kexec-tools? Either drop the changes or take the new fix from Gentoo?

I did resync the package, but that's done in my krnowak/weekly branch, which is what CI is running against. Will update this buildbot/yadda-yadda branch soon, too. I asked for a review a bit too early by accident, sorry about that.

[github-actions]

Build action triggered: https://github.com/flatcar/scripts/actions/runs/10390412240

[krnowak]

CI passed. One thing I noticed is that we are installing python tests to oem sysexts, which I'd say is quite pointless and takes a lot of space. Will file a separate PR that removes them.

[chewi]

CI passed. One thing I noticed is that we are installing python tests to oem sysexts, which I'd say is quite pointless and takes a lot of space. Will file a separate PR that removes them.

Actually, Gentoo installs these too, even on the install media. There has been some debate about them, but some libraries assume these test files are present! There's no way to determine which ones need to be kept.

[krnowak]

CI passed. One thing I noticed is that we are installing python tests to oem sysexts, which I'd say is quite pointless and takes a lot of space. Will file a separate PR that removes them.

Actually, Gentoo installs these too, even on the install media. There has been some debate about them, but some libraries assume these test files are present! There's no way to determine which ones need to be kept.

I just looked what other distros do. I can see some tests installed on Fedora, but not the python3 regressions tests. On Ubuntu there are regression tests installed too. Anyway, it's a discussion for a separate PR, which I have already filed: #2230.

Thanks for the review.