From a50ad8a6ade2c3b75b5472699f0cf1b399e69e8a Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" Date: Wed, 28 Oct 2026 16:30:29 +0000 Subject: [PATCH 1/6] Updated dependency 'lmdb' from version 1.0.2 to 1.0.3 --- deps-packaging/lmdb/cfbuild-lmdb.spec | 2 +- deps-packaging/lmdb/distfiles | 2 +- deps-packaging/lmdb/source | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/deps-packaging/lmdb/cfbuild-lmdb.spec b/deps-packaging/lmdb/cfbuild-lmdb.spec index 48f449bf3..100c76e73 100644 --- a/deps-packaging/lmdb/cfbuild-lmdb.spec +++ b/deps-packaging/lmdb/cfbuild-lmdb.spec @@ -1,4 +1,4 @@ -%define lmdb_version 1.0.2 +%define lmdb_version 1.0.3 Summary: CFEngine Build Automation -- lmdb Name: cfbuild-lmdb diff --git a/deps-packaging/lmdb/distfiles b/deps-packaging/lmdb/distfiles index b77642d34..0d17918aa 100644 --- a/deps-packaging/lmdb/distfiles +++ b/deps-packaging/lmdb/distfiles @@ -1 +1 @@ -38a029bb3e29820380e18a2dfdbe906bbc5b322132c63274c5e4ed7833821752 openldap-LMDB_1.0.2.tar.gz +e2d6d9985a16d7ce6bbf5e97c7099c50e38950ee98a7dd8e30c82b74eb9ee382 openldap-LMDB_1.0.3.tar.gz diff --git a/deps-packaging/lmdb/source b/deps-packaging/lmdb/source index fdac52dcc..d5e779c76 100644 --- a/deps-packaging/lmdb/source +++ b/deps-packaging/lmdb/source @@ -1 +1 @@ -https://git.openldap.org/openldap/openldap/-/archive/LMDB_1.0.2/ +https://git.openldap.org/openldap/openldap/-/archive/LMDB_1.0.3/ From cc17be538a9b1f657f73a2362bef87e5ad465c17 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" Date: Wed, 28 Oct 2026 16:30:30 +0000 Subject: [PATCH 2/6] Updated dependency 'openldap' from version 2.7.1 to 2.7.2 --- deps-packaging/openldap/cfbuild-openldap-aix.spec | 2 +- deps-packaging/openldap/cfbuild-openldap.spec | 2 +- deps-packaging/openldap/distfiles | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/deps-packaging/openldap/cfbuild-openldap-aix.spec b/deps-packaging/openldap/cfbuild-openldap-aix.spec index b7eccf7f6..689832ec0 100644 --- a/deps-packaging/openldap/cfbuild-openldap-aix.spec +++ b/deps-packaging/openldap/cfbuild-openldap-aix.spec @@ -1,4 +1,4 @@ -%define openldap_version 2.7.1 +%define openldap_version 2.7.2 Summary: CFEngine Build Automation -- openldap Name: cfbuild-openldap diff --git a/deps-packaging/openldap/cfbuild-openldap.spec b/deps-packaging/openldap/cfbuild-openldap.spec index 4f3fb2b0f..92fd86ffe 100644 --- a/deps-packaging/openldap/cfbuild-openldap.spec +++ b/deps-packaging/openldap/cfbuild-openldap.spec @@ -1,4 +1,4 @@ -%define openldap_version 2.7.1 +%define openldap_version 2.7.2 Summary: CFEngine Build Automation -- openldap Name: cfbuild-openldap diff --git a/deps-packaging/openldap/distfiles b/deps-packaging/openldap/distfiles index 63326e6de..f770ff117 100644 --- a/deps-packaging/openldap/distfiles +++ b/deps-packaging/openldap/distfiles @@ -1 +1 @@ -253db80f301258ea69cda1184766d57395b836aaabf41157eb0316eb0fac1341 openldap-2.7.1.tgz +aad731aa22118ff327b9b4ddfc4b6f18ef9476586205da88a532e90940b523d2 openldap-2.7.2.tgz From 8a50ed0cef7e65b15d51b164d645e2e6f0ddc290 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" Date: Wed, 28 Oct 2026 16:30:30 +0000 Subject: [PATCH 3/6] Updated dependency 'openssl' from version 4.0.3 to 4.1.0 --- deps-packaging/openssl/cfbuild-openssl.spec | 2 +- deps-packaging/openssl/distfiles | 2 +- deps-packaging/openssl/source | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/deps-packaging/openssl/cfbuild-openssl.spec b/deps-packaging/openssl/cfbuild-openssl.spec index 10683f35f..085041151 100644 --- a/deps-packaging/openssl/cfbuild-openssl.spec +++ b/deps-packaging/openssl/cfbuild-openssl.spec @@ -1,4 +1,4 @@ -%define openssl_version 4.0.3 +%define openssl_version 4.1.0 Summary: CFEngine Build Automation -- openssl Name: cfbuild-openssl diff --git a/deps-packaging/openssl/distfiles b/deps-packaging/openssl/distfiles index 7f7783763..019ba71a9 100644 --- a/deps-packaging/openssl/distfiles +++ b/deps-packaging/openssl/distfiles @@ -1 +1 @@ -325b5c806167c13b40b1ffeadfe0248197c00eccc4cf123ec1e28d2d2fd216d9 openssl-4.0.3.tar.gz +50c17baf54cb008f6ce42d50deb4b28050a1aad711636cabd4b241c7e90cc2fd openssl-4.1.0.tar.gz diff --git a/deps-packaging/openssl/source b/deps-packaging/openssl/source index 3f569e081..8ec542e51 100644 --- a/deps-packaging/openssl/source +++ b/deps-packaging/openssl/source @@ -1 +1 @@ -https://github.com/openssl/openssl/releases/download/openssl-4.0.3/ +https://github.com/openssl/openssl/releases/download/openssl-4.1.0/ From c583b956db263bfcd4fe61fb41aef00509728397 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" Date: Wed, 28 Oct 2026 16:30:33 +0000 Subject: [PATCH 4/6] Updated dependency 'leech2' from version 6.0.0 to 7.0.0 --- deps-packaging/leech2/cfbuild-leech2.spec | 2 +- deps-packaging/leech2/distfiles | 2 +- deps-packaging/leech2/source | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/deps-packaging/leech2/cfbuild-leech2.spec b/deps-packaging/leech2/cfbuild-leech2.spec index ae5cd5236..28a9fca91 100644 --- a/deps-packaging/leech2/cfbuild-leech2.spec +++ b/deps-packaging/leech2/cfbuild-leech2.spec @@ -1,4 +1,4 @@ -%define leech2_version 6.0.0 +%define leech2_version 7.0.0 Summary: CFEngine Build Automation -- leech2 Name: cfbuild-leech2 diff --git a/deps-packaging/leech2/distfiles b/deps-packaging/leech2/distfiles index 98feb14d6..4689c75bd 100644 --- a/deps-packaging/leech2/distfiles +++ b/deps-packaging/leech2/distfiles @@ -1 +1 @@ -9ff6a89338e1a9057cd50e4d70d912ff6d50f09e590e6374807e1f8f77612d3d leech2-6.0.0.tar.gz +dcabbd4f4aa0ea66aa741cb27939ce8a60a5da633d4f297422c0cf045dc88717 leech2-7.0.0.tar.gz diff --git a/deps-packaging/leech2/source b/deps-packaging/leech2/source index fb84cab37..7935be225 100644 --- a/deps-packaging/leech2/source +++ b/deps-packaging/leech2/source @@ -1 +1 @@ -https://github.com/larsewi/leech2/releases/download/v6.0.0/ +https://github.com/larsewi/leech2/releases/download/v7.0.0/ From f4dcd83121df1f64c3f82c9e5c962616c8fbad35 Mon Sep 17 00:00:00 2001 From: Lars Erik Wik Date: Fri, 30 Oct 2026 12:31:54 +0100 Subject: [PATCH 5/6] Removed no-ecdh and no-ecdsa from OpenSSL config flags OpenSSL 4.1.0 dropped these options from Configure, as they never really disabled the implementations. Configure now fails on them. See https://github.com/openssl/openssl/blob/openssl-4.1.0/CHANGES.md Co-Authored-By: Claude Opus 5.5 Signed-off-by: Lars Erik Wik --- deps-packaging/openssl/config_flags_agent.txt | 2 +- deps-packaging/openssl/config_flags_hub.txt | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/deps-packaging/openssl/config_flags_agent.txt b/deps-packaging/openssl/config_flags_agent.txt index 290b0fc5c..89aa2a4ad 100644 --- a/deps-packaging/openssl/config_flags_agent.txt +++ b/deps-packaging/openssl/config_flags_agent.txt @@ -1 +1 @@ -shared no-egd no-zlib no-uplink no-async no-cmp no-comp no-ct no-dgram no-dso no-ec2m no-engine no-filenames no-gost no-psk no-rfc3779 no-srp no-srtp no-ssl-trace no-tests no-ts no-ui-console no-ssl3 no-dtls no-aria no-blake2 no-chacha no-cmac no-dsa no-ecdh no-ecdsa no-idea no-mdc2 no-ocb no-poly1305 no-rc2 no-rc4 no-scrypt no-seed no-siphash no-siv no-sm2 no-sm3 no-sm4 no-whirlpool no-dtls1-method no-dtls1_2-method +shared no-egd no-zlib no-uplink no-async no-cmp no-comp no-ct no-dgram no-dso no-ec2m no-engine no-filenames no-gost no-psk no-rfc3779 no-srp no-srtp no-ssl-trace no-tests no-ts no-ui-console no-ssl3 no-dtls no-aria no-blake2 no-chacha no-cmac no-dsa no-idea no-mdc2 no-ocb no-poly1305 no-rc2 no-rc4 no-scrypt no-seed no-siphash no-siv no-sm2 no-sm3 no-sm4 no-whirlpool no-dtls1-method no-dtls1_2-method diff --git a/deps-packaging/openssl/config_flags_hub.txt b/deps-packaging/openssl/config_flags_hub.txt index d48f1bf2c..863398dde 100644 --- a/deps-packaging/openssl/config_flags_hub.txt +++ b/deps-packaging/openssl/config_flags_hub.txt @@ -1 +1 @@ -shared no-egd no-zlib no-uplink no-async no-cmp no-comp no-ct no-dgram no-dso no-ec2m no-engine no-filenames no-gost no-psk no-rfc3779 no-srp no-srtp no-ssl-trace no-tests no-ts no-ui-console no-ssl3 no-dtls no-aria no-blake2 no-chacha no-cmac no-dsa no-ecdh no-ecdsa no-idea no-mdc2 no-ocb no-poly1305 no-rc2 no-rc4 no-scrypt no-seed no-siphash no-siv no-sm2 no-sm3 no-sm4 no-whirlpool no-dtls1-method no-dtls1_2-method +shared no-egd no-zlib no-uplink no-async no-cmp no-comp no-ct no-dgram no-dso no-ec2m no-engine no-filenames no-gost no-psk no-rfc3779 no-srp no-srtp no-ssl-trace no-tests no-ts no-ui-console no-ssl3 no-dtls no-aria no-blake2 no-chacha no-cmac no-dsa no-idea no-mdc2 no-ocb no-poly1305 no-rc2 no-rc4 no-scrypt no-seed no-siphash no-siv no-sm2 no-sm3 no-sm4 no-whirlpool no-dtls1-method no-dtls1_2-method From 5cc1cbc54e569957642fdca10f9458c7ffd650bc Mon Sep 17 00:00:00 2001 From: Lars Erik Wik Date: Fri, 30 Oct 2026 13:26:54 +0100 Subject: [PATCH 6/6] Removed obsolete gcc-8.5.patch for openldap OpenLDAP 2.7.2 wraps the affected case bodies in braces upstream, so the patch is no longer needed and no longer applies. Co-Authored-By: Claude Opus 5.5 Signed-off-by: Lars Erik Wik --- deps-packaging/openldap/cfbuild-openldap.spec | 2 -- deps-packaging/openldap/debian/rules | 3 -- deps-packaging/openldap/gcc-8.5.patch | 29 ------------------- 3 files changed, 34 deletions(-) delete mode 100644 deps-packaging/openldap/gcc-8.5.patch diff --git a/deps-packaging/openldap/cfbuild-openldap.spec b/deps-packaging/openldap/cfbuild-openldap.spec index 92fd86ffe..6ddf60be4 100644 --- a/deps-packaging/openldap/cfbuild-openldap.spec +++ b/deps-packaging/openldap/cfbuild-openldap.spec @@ -6,7 +6,6 @@ Version: %{version} Release: 1 Source0: openldap-%{openldap_version}.tgz Patch0: no_Sockaddr_redefine.patch -Patch1: gcc-8.5.patch License: MIT Group: Other Url: https://cfengine.com @@ -21,7 +20,6 @@ mkdir -p %{_builddir} %setup -q -n openldap-%{openldap_version} %patch -P0 -p0 -%patch -P1 -p1 CPPFLAGS=-I%{buildprefix}/include diff --git a/deps-packaging/openldap/debian/rules b/deps-packaging/openldap/debian/rules index f33c3cd44..7117f9794 100755 --- a/deps-packaging/openldap/debian/rules +++ b/deps-packaging/openldap/debian/rules @@ -26,9 +26,6 @@ build: build-stamp build-stamp: dh_testdir - # for older compilers we need to patch some code - patch -p1 < gcc-8.5.patch - ./configure --prefix=$(PREFIX) \ --enable-shared \ --disable-slapd \ diff --git a/deps-packaging/openldap/gcc-8.5.patch b/deps-packaging/openldap/gcc-8.5.patch deleted file mode 100644 index 813de5f15..000000000 --- a/deps-packaging/openldap/gcc-8.5.patch +++ /dev/null @@ -1,29 +0,0 @@ ---- openldap-2.6.13/libraries/libldap/tls_o.c 2026-05-19 21:29:39.874030878 +0000 -+++ patched-openldap/libraries/libldap/tls_o.c 2026-05-19 21:24:52.955329138 +0000 -@@ -543,7 +543,7 @@ - - while ((info = OSSL_STORE_load( sctx ))) { - switch (OSSL_STORE_INFO_get_type( info )) { -- case OSSL_STORE_INFO_CERT: -+ case OSSL_STORE_INFO_CERT:; - X509 *cert = OSSL_STORE_INFO_get0_CERT( info ); - X509_STORE *store = SSL_CTX_get_cert_store( ctx ); - if ( !X509_STORE_add_cert( store, cert ) ) { -@@ -753,7 +753,7 @@ - return -1; - } - break; -- case OSSL_STORE_INFO_CERT: -+ case OSSL_STORE_INFO_CERT:; - X509 *cert = OSSL_STORE_INFO_get0_CERT(info); - int is_ca = X509_check_ca( cert ); - if ( !is_ca && !SSL_CTX_use_certificate( ctx, cert )) { -@@ -773,7 +773,7 @@ - return -1; - } - break; -- case OSSL_STORE_INFO_CRL: -+ case OSSL_STORE_INFO_CRL:; - X509_STORE *x509_s = SSL_CTX_get_cert_store( ctx ); - if ( !X509_STORE_add_crl( x509_s, - OSSL_STORE_INFO_get0_CRL(info) )) {