community/imagemagick/APKBUILD

@@ -68,6 +68,8 @@ s390x)
 esac
 
 # secfixes:
+#   7.1.1.21-r0:
+#     - CVE-2023-5341
 #   7.1.0.52-r0:
 #     - CVE-2022-44267
 #     - CVE-2022-44268

community/kasts/APKBUILD

@@ -5,10 +5,11 @@
 # group=kde-applications
 pkgname=kasts
 pkgver=23.08.2
-pkgrel=0
+pkgrel=1
 pkgdesc="Kirigami-based podcast player"
 # armhf blocked by extra-cmake-modules
-arch="all !armhf"
+# s390x blocked by vlc-dev
+arch="all !armhf !s390x"
 url="https://invent.kde.org/plasma-mobile/kasts"
 license="LicenseRef-KDE-Accepted-GPL AND CC0-1.0"
 depends="
@@ -36,6 +37,7 @@ makedepends="
 	syndication5-dev
 	taglib-dev
 	threadweaver5-dev
+	vlc-dev
 	"
 subpackages="$pkgname-lang"
 _repo_url="https://invent.kde.org/multimedia/kasts.git"

community/oci-cli/APKBUILD

 # Contributor: Adam Bruce <adam@adambruce.net>
 # Maintainer: Duncan Bellamy <dunk@denkimushi.com>
 pkgname=oci-cli
-pkgver=3.34.0
+pkgver=3.35.0
 pkgrel=0
 pkgdesc="Oracle Cloud Infrastructure CLI"
 url="https://docs.oracle.com/en-us/iaas/Content/API/Concepts/cliconcepts.htm"
@@ -46,5 +46,5 @@ package() {
 }
 
 sha512sums="
-a1cbf8016203849b70b5b5ff9b5b214266a177b9baa3889eb8bfe1792c9947c24b02b96496c04030e38c3da25bba53f2a2ef52d19be1014de5ead2558d93f632  oci-cli-3.34.0.tar.gz
+6f565bfc4e8afa66ee4d9d8034065e9a55b48728cb05d87418769cf45ff5226d57bff1cdd196e39c9af47b0923a60686754bb17bb66caf94feee22799f9c71e3  oci-cli-3.35.0.tar.gz
 "

community/py3-cryptography/APKBUILD

 # Contributor: August Klein <amatcoder@gmail.com>
 # Maintainer: Duncan Bellamy <dunk@denkimushi.com>
 pkgname=py3-cryptography
-pkgver=41.0.4
+pkgver=41.0.5
 pkgrel=0
 pkgdesc="Cryptographic recipes and primitives for Python"
 url="https://cryptography.io/"
@@ -72,6 +72,6 @@ package() {
 }
 
 sha512sums="
-0c0a025ed5e39195561e5a6374463ee2261448657ebb89e39e761a5b02c701a8f804c1f84733cf8376e44a46784b2cc41134952c329987a96ee85cb4532c75cd  cryptography-41.0.4.tar.gz
-4d0d707530dbf20f07214f8e01f659cec9b4db74c5a329911b510962a2d6a843ae62e4598c00dce6b79aa402034419e6347ab8b0837beb18c173726649841704  cryptography_vectors-41.0.4.tar.gz
+c9eb13c32b4db7358d147fd2218d5afb29308859f40c06da6da5e9703e815c8f22774e586bc75f91ea2e4e9b7c18b3b9a7a9288ff4217343f62171344ee81b4a  cryptography-41.0.5.tar.gz
+082ccab3512820cb4b1352863a9c592d2a2e550e8c819bf3dcda6fcff9e742af9a0c9e99dc3ad75a6ac52f90a906273893a7356569ded0b272016ee071c7a560  cryptography_vectors-41.0.5.tar.gz
 "

community/py3-flask-cors/APKBUILD

@@ -11,7 +11,7 @@ depends="py3-flask py3-werkzeug"
 makedepends="py3-gpep517 py3-setuptools py3-wheel"
 checkdepends="py3-pytest"
 subpackages="$pkgname-pyc"
-source="$pkgname-$pkgver.tar.gz::https://github.com/corydolphin/flask-cors/archive/refs/tags/v$pkgver.tar.gz"
+source="$pkgname-$pkgver.tar.gz::https://github.com/corydolphin/flask-cors/archive/refs/tags/$pkgver.tar.gz"
 builddir="$srcdir/flask-cors-$pkgver"
 
 build() {
@@ -32,5 +32,5 @@ package() {
 }
 
 sha512sums="
-04f163d646d2f5fc96b397a3d52ad0e6b99ae6caaec67855e05b4330a323d1b28ab4d624000cbce9a897dba8a00317828e7056537454d1bb7febfcdddd37096d  py3-flask-cors-4.0.0.tar.gz
+4e53ab03056699f2251ba15473009a752670f69e98cd094b7de6cda3c94d917f7b4e810eb2c603c26b79f3eaa54c91c6fab9ffdf2efffd661ad0900a960aacaf  py3-flask-cors-4.0.0.tar.gz
 "

community/py3-oci/APKBUILD

 # Contributor: Duncan Bellamy <dunk@denkimushi.com>
 # Maintainer: Duncan Bellamy <dunk@denkimushi.com>
 pkgname=py3-oci
-pkgver=2.113.0
+pkgver=2.114.0
 pkgrel=0
 pkgdesc="Oracle Cloud Infrastructure Python SDK"
 url="https://docs.oracle.com/en-us/iaas/tools/python/2.53.1/index.html"
@@ -35,6 +35,6 @@ package() {
 }
 
 sha512sums="
-ac15590e6d33551dd8a479fc226544147345e75741c96cf8211dfeea2a2e1efe62659bf05ad1482900738317cc00f6bca118a6f5348202edd7161c3bdeaa6173  py3-oci.2.113.0.tar.gz
+6f0273c826b12e60cbedc3e80fe27cfb6e6af3606deaf8d854e4049c91ca4983bc95fd4633e713367a27f49b3c244649588a3e6f9009d5673e8c81255d9a18d1  py3-oci.2.114.0.tar.gz
 e88495f19a3b9bd4b4b086007e2c93d6200aa316e93c1ec58b31794afb58967994f061a5ad1346edbbecd9119cea7a60c1e2ac6cba99f78b4e349b8f594ce01f  vcr.patch
 "

community/py3-psycopg/APKBUILD

@@ -2,7 +2,7 @@
 # Maintainer: omni <omni+alpine@hack.org>
 pkgname=py3-psycopg
 pkgver=3.1.12
-pkgrel=1
+pkgrel=2
 pkgdesc="PostgreSQL adapter for python"
 options="!check" # Requires running database
 url="https://www.psycopg.org/"
@@ -66,13 +66,15 @@ _c_pyc() {
 	install_if="${subpkgname%-pyc}=$pkgver-r$pkgrel pyc"
 
 	cd "$pkgdir"
+	# shellcheck disable=SC3003
 	local IFS=$'\n'
+	# shellcheck disable=SC2046
 	amove $(find usr/lib/python*/site-packages/psycopg_c -type d -name __pycache__)
 }
 
 sha512sums="
 52489337ee4bfc4fe3070a731661264238646f50c86ecf9b4c902da1ab050b2ba6a8f8d1322b0f57f368d3c93f7ec3dd59f7970319e2df8eb52c728a5d7fecc1  psycopg-3.1.12.tar.gz
 d61e8d6a32ad43e439e906738d1046cf839a9b6576c339b342c46be3565b8863fa0a13205c98f24e8378a8b81939f8eb7465f290264ffd736736508dcb3e2331  fix-missing-type-imports.patch
-0637ef0c95fd579eba0fe1f7048e799d46f73d73cf639cdc08b7fadbeacfcb3c39f6e12d4f465e58c175f8d2d044e6ace3e07d38893db3fb6e965cb32b0a8195  typing-ext.patch
+3b8dfaebe7833e4095ef15b08b4b29f5650735bc1b3cea66ccef550e4deb5413d46b9fb3cb8a22582c1085c6ea5cadf92d27a751161846dbcb9e2f8e91236fa8  typing-ext.patch
 4b256bf649a5280442c684482ef094d27022dd6e2b2669a0a7f0e531364a5c60bd8fdf4eaf2e2687257dc52561e9eed275438ba6e404dba5d2c5469be9c1e209  psycopg-binary.patch
 "

community/py3-psycopg/typing-ext.patch

@@ -240,3 +240,13 @@ index 9a67abd..47bed7c 100755
  
  import psycopg
  from psycopg.rows import TupleRow
+--- a/psycopg/setup.cfg
++++ b/psycopg/setup.cfg
+@@ -43,7 +43,6 @@
+ zip_safe = False
+ install_requires =
+     backports.zoneinfo >= 0.2.0; python_version < "3.9"
+-    typing-extensions >= 4.1
+     tzdata; sys_platform == "win32"
+ 
+ [options.package_data]

community/radicale/APKBUILD

@@ -15,7 +15,9 @@ pkggroups="radicale"
 install="$pkgname.pre-install"
 source="$pkgname-$pkgver.tar.gz::https://github.com/Kozea/radicale/archive/v$pkgver.tar.gz
 	$pkgname.initd
-	$pkgname.confd"
+	$pkgname.confd
+	py311-test_server.patch
+	"
 subpackages="$pkgname-openrc $pkgname-pyc"
 builddir="$srcdir/Radicale-$pkgver"
 
@@ -27,7 +29,7 @@ check() {
 	# install the package to test_install directory for testing
 	python3 setup.py install --root="$PWD"/test_install
 
-	PYTHONPATH="$PWD"/test_install/usr/lib/python3.10/site-packages \
+	PYTHONPATH="$(echo $PWD/test_install/usr/lib/python3*/site-packages)" \
 		pytest -c /dev/null
 }
 
@@ -49,4 +51,5 @@ sha512sums="
 5c4b55ee9cfc5060a0e0cf1f284d2c5a354bcabd7a088214e917fabb0083bcd172fd92aeb59b1f869f34e04f8c276efbed15c2a3ff2fdbc81b2220586bbaf31b  radicale-3.1.8.tar.gz
 f1eb4477ca7d7d8040837b712289f18d6b62c7f862a8e9bea32968a49b8bf4394360b5440c815aa23df48ba0aaac61bcb8c9d6e7575c3b23da2ac05a45eac194  radicale.initd
 09bb6228ba07039b97b317d4547a33b7ebf9c8f47ff72b870fc2f5e46de620e0614d993c5c96d73f0ad6196d469bb0f7206478781abf314af1d598e3132d678e  radicale.confd
+7b0d2d78f01b379e9c7ac1e2e509986f72ce6de1749cd358502c01bf1346e25348885c172315fc3052fa6131950086bb90857958b1c1df78cb7048999a18193d  py311-test_server.patch
 "

community/radicale/py311-test_server.patch

+Patch-Source: https://github.com/Kozea/Radicale/pull/1328.patch
+--
+From 110ec3a7885f523ce894a8c0e336c1a081dcd092 Mon Sep 17 00:00:00 2001
+From: Theodore Ni <3806110+tjni@users.noreply.github.com>
+Date: Tue, 29 Aug 2023 20:49:00 -0700
+Subject: [PATCH] Remove brackets from IPv4 test hostnames
+
+Python 3.11 follows the URI spec more closely and no longer allows
+braces surrounding IPv4 addresses in hostnames.
+---
+ radicale/tests/test_server.py | 7 +++++--
+ 1 file changed, 5 insertions(+), 2 deletions(-)
+
+diff --git a/radicale/tests/test_server.py b/radicale/tests/test_server.py
+index af3cf29b..73c73e0e 100644
+--- a/radicale/tests/test_server.py
++++ b/radicale/tests/test_server.py
+@@ -60,8 +60,9 @@ def setup(self) -> None:
+         with socket.socket(socket.AF_INET, socket.SOCK_STREAM) as sock:
+             # Find available port
+             sock.bind(("127.0.0.1", 0))
++            self.sockfamily = socket.AF_INET
+             self.sockname = sock.getsockname()
+-        self.configure({"server": {"hosts": "[%s]:%d" % self.sockname},
++        self.configure({"server": {"hosts": "%s:%d" % self.sockname},
+                         # Enable debugging for new processes
+                         "logging": {"level": "debug"}})
+         self.thread = threading.Thread(target=server.serve, args=(
+@@ -105,8 +106,9 @@ def request(self, method: str, path: str, data: Optional[str] = None,
+         data_bytes = None
+         if data:
+             data_bytes = data.encode(encoding)
++        req_host = ("[%s]" % self.sockname[0]) if self.sockfamily == socket.AF_INET6 else self.sockname[0]
+         req = request.Request(
+-            "%s://[%s]:%d%s" % (scheme, *self.sockname, path),
++            "%s://%s:%d%s" % (scheme, req_host, self.sockname[1], path),
+             data=data_bytes, headers=headers, method=method)
+         while True:
+             assert is_alive_fn()
+@@ -161,6 +163,7 @@ def test_ipv6(self) -> None:
+                     server.COMPAT_IPPROTO_IPV6, socket.IPV6_V6ONLY, 1)
+                 # Find available port
+                 sock.bind(("::1", 0))
++                self.sockfamily = socket.AF_INET6
+                 self.sockname = sock.getsockname()[:2]
+         except OSError as e:
+             if e.errno in (errno.EADDRNOTAVAIL, errno.EAFNOSUPPORT,

main/arm-trusted-firmware/APKBUILD

@@ -2,7 +2,7 @@
 # Contributor: Maxim Karasev <begs@disroot.org>
 # Maintainer: Bart Ribbers <bribbers@disroot.org>
 pkgname=arm-trusted-firmware
-pkgver=2.8.8
+pkgver=2.8.9
 pkgrel=0
 pkgdesc="ARM Trusted Firmware-A (TF-A)"
 url="https://github.com/ARM-software/arm-trusted-firmware"
@@ -78,7 +78,7 @@ tools() {
 }
 
 sha512sums="
-f0107e8cf8362f48e427e4831084093f703823525c7126b3993d05828190d4f615b21bbe589254680838bca8c49d00736399bba2f0241fc9c2d58c5de999ac18  arm-trusted-firmware-2.8.8.tar.gz
-f2ff9b6d2b843123e9044af5ead00a1e927e5389e5ab6bdb05ef0eb3a23468a615d6203e14afd05b3e250c9b39836d0d33920833f1211b51671ae5cd3e7e0da8  key_t.patch
+01aae529eb28be0ea54bb912eda9477e092a9432960c5be9d5891203a39048e9baed50fcffd84720afdf9ec174e3db07623bdab9d1e88aeb0c2f939a00b7f41e  arm-trusted-firmware-2.8.9.tar.gz
+71f59abbb3c53d975afe0f20456e8bd943f005aeeb14633f609ad7b7617d51c479a505b54f9c49f77e02ecdea233bc8dffecd31b79b86a38d9ad39f6b0dc1129  key_t.patch
 4b26d06cc5f23cd73515927624c164745dd144a0255a717052d80d904a58e001cb7b334ce1fa20cf21ba18b6e0f024da011321cb2c53dfb44ddd52ee24e31a66  rk3399.patch
 "

main/arm-trusted-firmware/key_t.patch

@@ -2,9 +2,9 @@ without it /usr/include/bits/alltypes.h defines key_t as int
 
 --- a/tools/cert_create/Makefile
 +++ b/tools/cert_create/Makefile
-@@ -43,7 +43,7 @@
- include ${PLAT_CERT_CREATE_HELPER_MK}
- endif
+@@ -49,7 +49,7 @@ endif
+ # from setting the OPENSSL_DIR path.
+ $(eval $(call SELECT_OPENSSL_API_VERSION))
  
 -HOSTCCFLAGS := -Wall -std=c99
 +HOSTCCFLAGS := -Wall -std=c99 -D__DEFINED_key_t=1

main/libdnet/APKBUILD

 # Maintainer: Natanael Copa <ncopa@alpinelinux.org>
 pkgname=libdnet
-pkgver=1.16.4
-pkgrel=1
+pkgver=1.17.0
+pkgrel=0
 pkgdesc="simplified, portable interface to several low-level networking routines"
 url="https://github.com/ofalk/libdnet"
 arch="all"
@@ -31,5 +31,5 @@ package() {
 }
 
 sha512sums="
-6c5556e365047afcc5da3f76b1c99aa70723c076a7cf75c03d96a661a583dfa6d0ab605076e68efffe5ddca2d69875e4bc4938e0874b8aa24915fcfbfe3f3ff9  libdnet-1.16.4.tar.gz
+b207b2f61e3759a2b17827eabf37b0eb68cb9fa27418f99ee4efd754b01dfe8504dff465664b14054d54df334195d43963d142c7104dc603b2b8b1491590d2a7  libdnet-1.17.0.tar.gz
 "

testing/py3-unearth/APKBUILD

 # Maintainer: Patrycja Rosa <alpine@ptrcnull.me>
 pkgname=py3-unearth
-pkgver=0.12.0
+pkgver=0.12.1
 pkgrel=0
 pkgdesc="Utility to fetch and download python packages"
 url="https://github.com/frostming/unearth"
@@ -32,5 +32,5 @@ package() {
 }
 
 sha512sums="
-0fa5e0b869b0b5ba699975970a5ef8f4a785bad5a9fcb6d9adb177bd3bf376c1e6068611a0196ce1991b3d6669c79d9706c2f25fc88a3f2ad73f246bd81e1988  py3-unearth-0.12.0.tar.gz
+0a5b396ac162f4e462048f978ad66f35190f63b580aa8752b191956dbbec3d392223bf15ef57bdb6b7027043cf14982db2c63cec13967126e132c53b03de5501  py3-unearth-0.12.1.tar.gz
 "