Skip to content

Conversation

@github-actions
Copy link

@github-actions github-actions bot commented Nov 3, 2025

CI: http://localhost:8080/job/container/job/sdk/2353/cldsv/

Fixes flatcar/Flatcar#1768
Fixes flatcar/Flatcar#1911

Lots of packages were reported, but trimmed - their dependencies were updated through the verify-sig eclass to use app-alternatives/gpg instead of app-crypt/gnupg. Not really relevant to Flatcar as we do not yet enable verify-sig.

--

  • app-containers/netavark: [SYSEXT-PODMAN]

  • app-crypt/gnupg: [PROD] [DEV]

    • from 2.4.8 to 2.4.8-r1
    • added IUSE flag 'alternatives'
      • added support for alternative GPG implementations
    • stopped masking USE=ssl in overlay profiles
    • build dependencies:
      • dropped a dependency 'app-crypt/gnupg' for USE 'verify-sig?'
      • added a dependency 'app-alternatives/gpg' for USE 'verify-sig?' -> '||'
      • added a dependency 'app-crypt/gnupg[-alternatives(-)]' for USE 'verify-sig?' -> '||'
    • post dependencies:
      • added a dependency 'app-alternatives/gpg[-freepg(-)]' for USE 'alternatives?'
  • app-emulation/qemu:

    • still at 10.0.5
    • build dependencies:
      • changes for dev-lang/python with USE conditionals 'python_targets_python3_11?':
        • added readline use enabled requirement (must exist, no pretending if missing)
        • added ensurepip use enabled requirement (will pretend as disabled if missing)
        • added ncurses use enabled requirement (must exist, no pretending if missing)
  • app-portage/getuto: [DEV]

    • from 1.15 to 1.15-r1
    • runtime dependencies:
      • dropped a dependency 'app-crypt/gnupg'
      • added a dependency 'app-alternatives/gpg[reference]' for USE '||'
      • added a dependency 'app-alternatives/gpg[freepg(-)]' for USE '||'
  • app-shells/bash: [PROD] [DEV]

    • from 5.3_p3-r2 to 5.3_p3-r3
    • improved window title setting behaviour
    • dependency changes brought by verify-sig eclass
    • build dependencies:
      • dropped a dependency 'app-crypt/gnupg' for USE 'verify-sig?'
      • added a dependency 'app-alternatives/gpg' for USE 'verify-sig?' -> '||'
      • added a dependency 'app-crypt/gnupg[-alternatives(-)]' for USE 'verify-sig?' -> '||'
  • app-shells/bash-completion: [DEV]

    • from 2.16.0-r2 to 2.16.0-r3
    • do not install completions for interdiff (provided by patchutils)
  • dev-build/cmake:

  • dev-build/meson:

    • still at 1.7.2
    • some dependency changes brought by verify-sig eclass
    • build dependencies:
      • dropped a dependency 'app-crypt/gnupg' for USE 'verify-sig?'
      • added a dependency 'app-alternatives/gpg' for USE 'verify-sig?' -> '||'
      • added a dependency 'app-crypt/gnupg[-alternatives(-)]' for USE 'verify-sig?' -> '||'
  • dev-debug/strace: [PROD] [DEV]

    • from 6.16 to 6.17
    • dependency changes brought by verify-sig eclass
    • build dependencies:
      • dropped a dependency 'app-crypt/gnupg' for USE 'verify-sig?'
      • added a dependency 'app-alternatives/gpg' for USE 'verify-sig?' -> '||'
      • added a dependency 'app-crypt/gnupg[-alternatives(-)]' for USE 'verify-sig?' -> '||'
    • release notes: https://github.com/strace/strace/releases/tag/v6.17
  • dev-lang/go:

  • dev-libs/elfutils: [PROD] [DEV]

    • from 0.193 to 0.193-r1
    • workaround automagic libarchive dep
    • build dependencies:
      • dropped a dependency 'app-crypt/gnupg' for USE 'verify-sig?'
      • added a dependency 'app-alternatives/gpg' for USE 'verify-sig?' -> '||'
      • added a dependency 'app-crypt/gnupg[-alternatives(-)]' for USE 'verify-sig?' -> '||'
    • dependencies:
      • added a dependency '>=app-arch/libarchive-3.1.2:='
      • dropped a dependency '>=app-arch/libarchive-3.1.2:=' for USE 'debuginfod?'
    • runtime dependencies:
      • added a dependency '>=app-arch/libarchive-3.1.2:='
      • dropped a dependency '>=app-arch/libarchive-3.1.2:=' for USE 'debuginfod?'
  • dev-libs/glib: [PROD] [DEV]

    • still at 2.84.4
    • package became stable on 'amd64' and 'arm64'
      • dropped accept keywords from overlay profiles
    • dependencies:
      • added a weak blocker '!<dev-libs/gobject-introspection-1.80.1'
    • runtime dependencies:
      • added a weak blocker '!<dev-libs/gobject-introspection-1.80.1'
  • dev-libs/inih: [PROD] [DEV]

  • dev-libs/tree-sitter:

  • dev-python/cffi:

  • dev-python/cython:

  • dev-python/lark:

  • dev-python/lxml:

  • dev-python/markupsafe:

  • dev-python/more-itertools: [SYSEXT-PYTHON]

  • dev-python/poetry-core:

  • dev-python/pycparser:

  • dev-python/setuptools-scm: [SYSEXT-PYTHON]

  • dev-python/tree-sitter:

    • from 0.25.1 to 0.25.1-r1
    • dependencies:
      • changes for dev-libs/tree-sitter:
        • changed version constraint from >=0.25.0 to =0.25*
    • runtime dependencies:
      • changes for dev-libs/tree-sitter:
        • changed version constraint from >=0.25.0 to =0.25*
  • dev-python/trove-classifiers: [SYSEXT-PYTHON]

  • dev-util/gdbus-codegen:

    • still at 2.84.4
    • package became stable on 'amd64' and 'arm64'
      • dropped accept keywords from overlay profiles
  • dev-util/glib-utils:

    • still at 2.84.4
    • package became stable on 'amd64' and 'arm64'
      • dropped accept keywords from overlay profiles
  • dev-util/maturin:

  • eclass/cmake.eclass:

    • deprecated EAPI 7
    • some ECM (extra-cmake-modules) stuff
    • some compatibility warnings stuff
  • eclass/distutils-r1.eclass:

    • some wheel reuse stuff
  • eclass/pypi.eclass:

    • typo fixes
  • eclass/python-utils-r1.eclass:

    • use --force-reruns for EPYTEST_RERUNS
  • eclass/rust.eclass:

    • added 1.91.0
  • eclass/toolchain.eclass:

    • added a dependency of libxml2 if building cobol
  • eclass/verify-sig.eclass:

    • replaced dependency on gnupg in favor of app-alternatives/gpg
  • net-fs/cifs-utils: [PROD] [DEV]

  • net-fs/samba: [PROD] [DEV]

    • from 4.22.3 to 4.22.5-r1
    • dependencies:
      • added a dependency 'dev-python/cryptography[python_targets_python3_11(-)]' for USE 'python_single_target_python3_11?' -> 'addc?'
      • added a dependency 'net-dns/bind[gssapi]' for USE 'python_single_target_python3_11?' -> 'addc?'
      • added a dependency 'dev-python/cryptography[python_targets_python3_11(-)]' for USE 'python_single_target_python3_11?' -> 'ads?'
      • added a dependency 'dev-python/markdown[python_targets_python3_11(-)]' for USE 'python_single_target_python3_11?' -> 'ads?'
    • runtime dependencies:
      • added a dependency 'dev-python/cryptography[python_targets_python3_11(-)]' for USE 'python_single_target_python3_11?' -> 'addc?'
      • added a dependency 'net-dns/bind[gssapi]' for USE 'python_single_target_python3_11?' -> 'addc?'
      • added a dependency 'dev-python/cryptography[python_targets_python3_11(-)]' for USE 'python_single_target_python3_11?' -> 'ads?'
      • added a dependency 'dev-python/markdown[python_targets_python3_11(-)]' for USE 'python_single_target_python3_11?' -> 'ads?'
    • release notes: https://www.samba.org/samba/history/samba-4.22.5.html https://www.samba.org/samba/history/samba-4.22.4.html
  • net-libs/gnutls: [PROD] [DEV]

    • from 3.8.10 to 3.8.10-r1
    • added a patch fixing TLS regression
    • build dependencies:
      • dropped a dependency 'app-crypt/gnupg' for USE 'verify-sig?'
      • added a dependency 'app-alternatives/gpg' for USE 'verify-sig?' -> '||'
      • added a dependency 'app-crypt/gnupg[-alternatives(-)]' for USE 'verify-sig?' -> '||'
  • net-libs/libtirpc: [PROD] [DEV]

  • net-misc/curl: [PROD] [DEV]

    • still at 8.16.0-r1
    • build dependencies:
      • dropped a dependency 'app-crypt/gnupg' for USE 'verify-sig?'
      • added a dependency 'app-alternatives/gpg' for USE 'verify-sig?' -> '||'
      • added a dependency 'app-crypt/gnupg[-alternatives(-)]' for USE 'verify-sig?' -> '||'
    • dependencies:
      • changes for net-libs/mbedtls with USE conditionals 'ssl?' -> 'mbedtls?':
        • changed slot constraint from 0= to 3=
    • runtime dependencies:
      • changes for net-libs/mbedtls with USE conditionals 'ssl?' -> 'mbedtls?':
        • changed slot constraint from 0= to 3=
  • profiles:

    • nothing interesting
  • sys-apps/coreutils: [PROD] [DEV]

  • sys-apps/groff: [DEV]

    • from 1.23.0 to 1.23.0-r1
    • added a patch fixing a build with musl
  • sys-apps/hwdata: [PROD] [DEV]

  • sys-apps/iproute2: [PROD] [DEV]

  • sys-apps/kbd: [PROD] [DEV]

    • from 2.8.0 to 2.9.0
    • added IUSE flag 'lzma'
      • used for compressing fonts and keymaps
    • added IUSE flag 'zstd'
      • used for compressing fonts and keymaps
    • added IUSE flag 'zlib'
      • used for compressing fonts and keymaps
    • added IUSE flag 'bzip2'
      • used for compressing fonts and keymaps
    • dependencies:
      • added a dependency 'app-arch/bzip2' for USE 'bzip2?'
      • added a dependency 'app-arch/xz-utils' for USE 'lzma?'
      • added a dependency 'sys-libs/zlib' for USE 'zlib?'
      • added a dependency 'app-arch/zstd:=' for USE 'zstd?'
    • runtime dependencies:
      • added a dependency 'app-arch/bzip2' for USE 'bzip2?'
      • added a dependency 'app-arch/xz-utils' for USE 'lzma?'
      • added a dependency 'sys-libs/zlib' for USE 'zlib?'
      • added a dependency 'app-arch/zstd:=' for USE 'zstd?'
    • release notes: https://github.com/legionus/kbd/releases/tag/v2.9.0
  • sys-apps/locale-gen:

  • sys-apps/portage: [DEV]

  • sys-apps/smartmontools: [DEV]

    • from 7.5 to 7.5-r1
    • revbump only for gnupg alternatives stuff
    • runtime dependencies:
      • dropped a dependency 'app-crypt/gnupg' for USE 'update-drivedb?'
      • added a dependency 'app-alternatives/gpg' for USE 'update-drivedb?'
  • sys-apps/util-linux: [PROD] [DEV]

  • sys-devel/binutils: [DEV]

    • still at 2.45-r1
    • package became stable on 'arm64'
      • dropped accept keywords from overlay profiles
  • sys-fs/btrfs-progs: [PROD] [DEV]

    • from 6.16.1 to 6.17
    • build dependencies:
      • dropped a dependency 'app-crypt/gnupg' for USE 'verify-sig?'
      • added a dependency 'app-alternatives/gpg' for USE 'verify-sig?' -> '||'
      • added a dependency 'app-crypt/gnupg[-alternatives(-)]' for USE 'verify-sig?' -> '||'
    • release notes: https://github.com/kdave/btrfs-progs/releases/tag/v6.17
  • sys-fs/overlaybd: [SYSEXT-OVERLAYBD]

  • sys-libs/binutils-libs: [PROD] [DEV]

    • still at 2.45-r1
    • package became stable on 'arm64'
      • dropped accept keywords from overlay profiles

--

  • changelog
  • image diff

@github-actions github-actions bot added the main label Nov 3, 2025
@krnowak krnowak force-pushed the buildbot/weekly-portage-stable-package-updates-2025-11-03 branch from d665d32 to 008b660 Compare November 5, 2025 15:45
@krnowak krnowak force-pushed the buildbot/weekly-portage-stable-package-updates-2025-11-03 branch from 008b660 to 652fb75 Compare November 5, 2025 15:47
@krnowak krnowak force-pushed the buildbot/weekly-portage-stable-package-updates-2025-11-03 branch from 652fb75 to 3a7f99c Compare November 5, 2025 15:48
Flatcar Buildbot added 23 commits November 7, 2025 12:19
It's from Gentoo commit 2cbc992fc7f1efc0935fb8fa00657895290b9f6e.

Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
It's from Gentoo commit 58be940ae750c61f2c8a21670b46a93977938c04.

Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
It's from Gentoo commit 6b8056b3d62a6e17c9349617773ea5ece4e939ad.

Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
It's from Gentoo commit 654c4e95d94a76e3bafdfc40e809ceb437c6a196.

Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
It's from Gentoo commit b3e0a3e6f78bf1905e8aa6cd5e2dad5d89c64d1f.

Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
It's from Gentoo commit 176b9b4a16bb5bcf5e883a57e4f3a7106456c475.

Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
It's from Gentoo commit e2a5eb39eb9daf0f600578560eb9f68bb9a26b0f.

Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
It's from Gentoo commit f12f6e19940705a0a36dd6c5339e6e1c0d03d73a.

Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
It's from Gentoo commit 89787e8d134e0bc23f00c5d615e85712f0d8c1c8.

Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
It's from Gentoo commit cea83daf500c95b2f50bbc231571a13d58db0c4d.

Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
It's from Gentoo commit 83cb58f7e3a7f0d797c0da936e89890f3223fe79.

Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
It's from Gentoo commit 3c72cc70f78372172aea1025af77d2f54791ede2.

Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
It's from Gentoo commit 92e151365f81a9026858987342b7590d9eaba776.

Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
It's from Gentoo commit f817fc713665ad5b91d087cef30abfec366e3f77.

Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
It's from Gentoo commit f01a4922b1d03597da0be1f1fcda57e1fb653148.

Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
It's from Gentoo commit d83e25b6a59578c519b2910640b5cb4205f0275c.

Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
It's from Gentoo commit ec89cf91324d627e489796d288877a81e89f7368.

Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
It's from Gentoo commit 8dac0d021a9c8104bd51e76845a2d5c20914903f.

Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
It's from Gentoo commit 008e35d7ee71907b08c08c1f4c739c1987e5c52f.

Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
It's from Gentoo commit e186a1a13c102f41d68651ed24425fb648a518a9.

Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
It's from Gentoo commit f666db74c1dbf0580e83382e420fed8565c4e52b.

Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
It's from Gentoo commit e9e7e1a8557e324435de7683c54f4743bf0470ae.

Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
It's from Gentoo commit 4ddb0ec7712f6466d6723e0f123372e5fdebb51d.

Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
Flatcar Buildbot and others added 28 commits November 7, 2025 12:19
It's from Gentoo commit 5117e4ac5a2a50ab05501c8b123b116ebf81ae9a.

Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
It's from Gentoo commit 1ffaa410380a3fb20a39184856ffa7c8b0eafe45.

Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
It's from Gentoo commit 9775198062ffa5b0b683f63fbda6831d913db68c.

Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
It's from Gentoo commit e9d09c08e6e6b1fdd33d20be9fb6cbad570a0a7f.

Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
It's from Gentoo commit 4afcdfcad396f55ff30a81d255a259cda231a887.

Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
It's from Gentoo commit ee63a227611380fee98a22671d031cb9b4f545f9.

Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
It's from Gentoo commit 246c07ecaefe96b237b8e734c5d8eec44e2f95e8.

Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
It's from Gentoo commit 5d08f46bc5b915db4f23e49c9d1729422ff3f984.

Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
It's from Gentoo commit f4013fbc99c4a048f49f11706c73b55362f7812c.

Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
It's from Gentoo commit cafd8640380ad053eec7766a512c2a3fb79892df.

Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
It's from Gentoo commit 6dc328d10e89b02c817c2d81c48c8c14acf5e90a.

Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
It's from Gentoo commit c1de8b7e6fbefd39f8e7f099f742d6b45162db35.

Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
It's from Gentoo commit 73a775712b08395812bfc0ec0fef0a01a03963ea.

Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
It's from Gentoo commit 330b5683752e103508f32f0eef4425afc4e4eba9.

Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
It's from Gentoo commit f444d0057769fc0dac912ff5a6c8d9e4d183d7c7.

Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
It's from Gentoo commit 2947d17edabe4b46250546c20009e83a6bae645c.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
We do ship gnutls in production images and the mask is making problems
with new app-alternatives/gpg.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
- add patch for yaml-cpp to fix cmake 4.0 issues

- drop two cross patches as they are already upstreamed (keep the
  cross fixes for photon, though)

- drop tcmu pin patch (upstreamed)

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
@krnowak krnowak force-pushed the buildbot/weekly-portage-stable-package-updates-2025-11-03 branch from 3a7f99c to 424e9c3 Compare November 7, 2025 11:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

update: go update: coreutils

2 participants