Skip to content

Comments

Weekly portage-stable package updates 2026-01-12#3641

Merged
krnowak merged 452 commits intomainfrom
buildbot/weekly-portage-stable-package-updates-2026-01-12
Feb 20, 2026
Merged

Weekly portage-stable package updates 2026-01-12#3641
krnowak merged 452 commits intomainfrom
buildbot/weekly-portage-stable-package-updates-2026-01-12

Conversation

@github-actions
Copy link

@github-actions github-actions bot commented Jan 12, 2026 •
edited by krnowak
Loading

CI: http://localhost:8080/job/container/job/sdk/2475/cldsv/

Closes flatcar/Flatcar#1890
Closes flatcar/Flatcar#1947
Closes flatcar/Flatcar#1951
Closes flatcar/Flatcar#1957
Closes flatcar/Flatcar#1966

Partially addresses flatcar/Flatcar#1967

A rather large update: containerd, runc, gcc, portage, docker, podman, rust, selinux refpolicy.

There is some noise in the changes because of the LLVM bump from 20 to 21.

There were some issues:

--

  • acct-user/portage: [DEV]

    • from 0-r3 to 0-r4
    • runtime dependencies:
      • added a dependency 'acct-group/jobserver'

  • app-arch/libarchive: [PROD] [DEV]

  • app-arch/tar: [PROD] [DEV]

    • still at 1.35
    • started using branding eclass

  • app-cdr/cdrtools:

    • still at 3.02_alpha09-r5
    • made cdda2wav, cdrecord and readcd suid binaries for compatibility with FEATURES=suidctl

  • app-containers/containerd: [SYSEXT-CONTAINERD]

  • app-containers/containers-image: [SYSEXT-PODMAN]

  • app-containers/cri-tools: [PROD] [DEV]

  • app-containers/crun: [SYSEXT-PODMAN]

    • still at 1.21
    • fixed configure issues, dependencies below are added for running autoreconf
    • build dependencies:
      • added a dependency '>=dev-build/libtool-2.4.7-r3'
      • added a dependency 'sys-devel/gnuconfig'
      • added a dependency '>=dev-build/automake-1.18:1.18' for USE '||'
      • added a dependency '>=dev-build/automake-1.17-r1:1.17' for USE '||'
      • added a dependency '>=dev-build/autoconf-2.72-r1:2.72' for USE '||'

  • app-containers/docker: [SYSEXT-DOCKER]

  • app-containers/docker-cli: [SYSEXT-DOCKER]

  • app-containers/incus: [SYSEXT-INCUS]

    • from 6.0.4-r1 to 6.0.5
    • build agents for multiple architectures and platforms
      • there were issues with it, so added a config override to work them around
    • dependencies:
      • changes for dev-libs/cowsql:
        • changed version constraint from >=1.15.6 to >=1.15.9
    • runtime dependencies:
      • changes for dev-libs/cowsql:
        • changed version constraint from >=1.15.6 to >=1.15.9
      • added a dependency 'net-firewall/ebtables'
      • added a dependency 'sec-policy/apparmor-profiles' for USE 'apparmor?'
      • changes for net-firewall/nftables with USE conditionals '||':
        • added json use enabled requirement (must exist, no pretending if missing)
    • release notes: https://discuss.linuxcontainers.org/t/incus-6-0-5-lts-has-been-released/24445

  • app-containers/lxc: [SYSEXT-INCUS]

  • app-containers/podman: [SYSEXT-PODMAN]

  • app-containers/runc: [SYSEXT-CONTAINERD]

  • app-crypt/mit-krb5: [PROD] [DEV]

    • from 1.21.3 to 1.21.3-r1
    • added a patch fixing build with c23
    • package became unstable on 'arm64'
      • added accept keywords to overlay profiles

  • app-doc/eclass-manpages:

    • from 20250815 to 20251126
    • release notes: none

  • app-editors/nano:

  • app-editors/vim: [PROD] [DEV]

    • from 9.1.1652 to 9.1.1652-r2
    • added IUSE flag 'perl_features_ithreads'
      • brought by perl-module eclass
    • added IUSE flag 'perl_features_quadmath'
      • brought by perl-module eclass
    • added IUSE flag 'wayland'
      • brought by perl-module eclass
    • added IUSE flag 'perl_features_debug'
      • brought by perl-module eclass
    • dependencies:
      • added a dependency '>=dev-lang/perl-5.38.2-r3[perl_features_debug=,perl_features_ithreads=,perl_features_quadmath=]' for USE 'perl?'
      • added a dependency 'dev-libs/wayland' for USE 'wayland?'
    • runtime dependencies:
      • added a dependency '>=dev-lang/perl-5.38.2-r3[perl_features_debug=,perl_features_ithreads=,perl_features_quadmath=]' for USE 'perl?'
      • added a dependency 'dev-libs/wayland' for USE 'wayland?'

  • app-editors/vim-core: [PROD] [DEV]

    • from 9.1.1652 to 9.1.1652-r3
    • runtime dependencies:
      • added a dependency 'dev-util/xxd'
    • unbundled xxd, thus adding a dependency on it

  • app-emulation/qemu:

    • still at 10.0.5
    • package became stable on 'arm64'
      • dropped accept keywords from overlay profiles

  • app-shells/bash: [PROD] [DEV]

  • app-shells/bash-completion: [DEV]

  • app-text/mandoc:

    • from 1.14.6 to 1.14.6-r1
    • EAPI changed from '7' to '8'

  • app-text/scdoc:

  • dev-build/autoconf:

    • from 2.72-r4 to 2.72-r6
    • backported two patches from upstream

  • dev-build/cmake:

  • dev-build/make: [DEV]

    • from 4.4.1-r101 to 4.4.1-r102
    • added a patch fixing jobserver client not returning tokens on SIGINT

  • dev-build/ninja:

  • dev-cpp/gtest:

    • from 1.14.0-r2 to 1.17.0
    • added IUSE flag 'abseil'
      • pulls in dev-cpp/abseil and dev-libs/re2
    • dependencies:
      • added a dependency 'dev-cpp/abseil-cpp:=[abi_x86_32(-)?,abi_x86_64(-)?,abi_x86_x32(-)?,abi_mips_n32(-)?,abi_mips_n64(-)?,abi_mips_o32(-)?,abi_s390_32(-)?,abi_s390_64(-)?]' for USE 'abseil?'
      • added a dependency 'dev-libs/re2:=[abi_x86_32(-)?,abi_x86_64(-)?,abi_x86_x32(-)?,abi_mips_n32(-)?,abi_mips_n64(-)?,abi_mips_o32(-)?,abi_s390_32(-)?,abi_s390_64(-)?]' for USE 'abseil?'
    • runtime dependencies:
      • added a dependency 'dev-cpp/abseil-cpp:=[abi_x86_32(-)?,abi_x86_64(-)?,abi_x86_x32(-)?,abi_mips_n32(-)?,abi_mips_n64(-)?,abi_mips_o32(-)?,abi_s390_32(-)?,abi_s390_64(-)?]' for USE 'abseil?'
      • added a dependency 'dev-libs/re2:=[abi_x86_32(-)?,abi_x86_64(-)?,abi_x86_x32(-)?,abi_mips_n32(-)?,abi_mips_n64(-)?,abi_mips_o32(-)?,abi_s390_32(-)?,abi_s390_64(-)?]' for USE 'abseil?'
    • release notes: https://github.com/google/googletest/releases/tag/v1.17.0 https://github.com/google/googletest/releases/tag/v1.16.0 https://github.com/google/googletest/releases/tag/v1.15.0

  • dev-lang/go:

  • dev-lang/perl:

  • dev-lang/rust:

    • from 1.89.0 to 1.91.0
    • removed IUSE flag 'llvm_slot_20'
    • removed IUSE flag 'wasm'
      • renamed to rust_sysroots_wasm
    • added IUSE flag 'llvm_slot_21'
    • added IUSE flag 'rust_sysroots_bpf'
    • deps changes below are from bumping llvm from 20 to 21.
    • build dependencies:
      • changes for llvm-core/lld with USE conditionals 'lto?' -> 'system-llvm?' -> '||' -> 'llvm_slot_20?':
        • USE conditionals changed to 'lto?' -> 'system-llvm?' -> '||' -> 'llvm_slot_21?'
        • changed slot constraint from 20 to 21
      • changes for dev-lang/rust with USE conditionals '||':
        • changed slot constraint from 1.89.0 to 1.91.0
      • changes for dev-lang/rust with USE conditionals '||':
        • changed slot constraint from 1.88.0 to 1.90.0
      • changes for dev-lang/rust-bin with USE conditionals '||':
        • changed slot constraint from 1.89.0 to 1.91.0
      • changes for dev-lang/rust-bin with USE conditionals '||':
        • changed slot constraint from 1.88.0 to 1.90.0
    • dependencies:
      • changes for llvm-core/llvm with USE conditionals 'system-llvm?' -> 'llvm_slot_20?':
        • USE conditionals changed to 'system-llvm?' -> 'llvm_slot_21?'
        • changed slot constraint from 20 to 21
      • changes for llvm-core/llvm with USE conditionals 'system-llvm?' -> 'llvm_targets_AArch64?' -> 'llvm_slot_20?':
        • USE conditionals changed to 'system-llvm?' -> 'llvm_targets_AArch64?' -> 'llvm_slot_21?'
        • changed slot constraint from 20 to 21
      • changes for llvm-core/llvm with USE conditionals 'system-llvm?' -> 'llvm_targets_X86?' -> 'llvm_slot_20?':
        • USE conditionals changed to 'system-llvm?' -> 'llvm_targets_X86?' -> 'llvm_slot_21?'
        • changed slot constraint from 20 to 21
      • changes for llvm-core/lld with USE conditionals 'system-llvm?' -> 'wasm?' -> 'llvm_slot_20?':
        • USE conditionals changed to 'system-llvm?' -> 'rust_sysroots_wasm?' -> 'llvm_slot_21?'
        • changed slot constraint from 20 to 21
    • runtime dependencies:
      • changes for llvm-core/llvm with USE conditionals 'system-llvm?' -> 'llvm_slot_20?':
        • USE conditionals changed to 'system-llvm?' -> 'llvm_slot_21?'
        • changed slot constraint from 20 to 21
      • changes for llvm-core/llvm with USE conditionals 'system-llvm?' -> 'llvm_targets_AArch64?' -> 'llvm_slot_20?':
        • USE conditionals changed to 'system-llvm?' -> 'llvm_targets_AArch64?' -> 'llvm_slot_21?'
        • changed slot constraint from 20 to 21
      • changes for llvm-core/llvm with USE conditionals 'system-llvm?' -> 'llvm_targets_X86?' -> 'llvm_slot_20?':
        • USE conditionals changed to 'system-llvm?' -> 'llvm_targets_X86?' -> 'llvm_slot_21?'
        • changed slot constraint from 20 to 21
      • changes for llvm-core/lld with USE conditionals 'system-llvm?' -> 'wasm?' -> 'llvm_slot_20?':
        • USE conditionals changed to 'system-llvm?' -> 'rust_sysroots_wasm?' -> 'llvm_slot_21?'
        • changed slot constraint from 20 to 21
    • release notes: https://blog.rust-lang.org/2025/10/30/Rust-1.91.0/ https://blog.rust-lang.org/2025/09/18/Rust-1.90.0/

  • dev-lang/yasm:

    • still at 1.3.0-r2
    • package became stable on 'arm64'
      • dropped accept keywords from overlay profiles

  • dev-libs/cJSON: [DEV]

  • dev-libs/elfutils: [PROD] [DEV]

    • from 0.193-r1 to 0.194
    • package became unstable on 'amd64'
      • added accept keywords to overlay profiles
    • added IUSE flag 'libarchive'
      • gates enabling libarchive, mostly for debuginfod
    • dependencies:
      • dropped a dependency '>=app-arch/libarchive-3.1.2:='
      • added a dependency '>=app-arch/libarchive-3.1.2:=' for USE 'libarchive?'
    • runtime dependencies:
      • dropped a dependency '>=app-arch/libarchive-3.1.2:='
      • added a dependency '>=app-arch/libarchive-3.1.2:=' for USE 'libarchive?'
    • release notes: https://inbox.sourceware.org/elfutils-devel/CAJDtP-S0rYAOZQeDZvMtPkQztgK9RboWtYwpqNLCNGNdaSGn-A@mail.gmail.com/T/#u

  • dev-libs/libaio: [PROD] [DEV]

    • from 0.3.113-r2 to 0.3.113_p8
    • took a patchset from Debian

  • dev-libs/libdnet: [VMWARE]

    • from 1.18.0-r2 to 1.18.0-r3
    • dependencies:
      • added a dependency 'dev-python/netifaces[python_targets_python3_11(-)?,python_targets_python3_12(-)?]' for USE 'python?'
    • runtime dependencies:
      • added a dependency 'dev-python/netifaces[python_targets_python3_11(-)?,python_targets_python3_12(-)?]' for USE 'python?'

  • dev-libs/libnl: [PROD] [DEV]

  • dev-libs/libpcre2: [PROD] [DEV]

  • dev-libs/libxml2: [PROD] [DEV]

  • dev-libs/libxslt: [VMWARE]

    • from 1.1.43-r1 to 1.1.43-r2
    • added a patchset
      • does not seem to conflict with our patch

  • dev-libs/tree-sitter:

  • dev-libs/tree-sitter-bash:

  • dev-libs/userspace-rcu: [PROD] [DEV]

  • dev-libs/xxhash:

    • from 0.8.3 to 0.8.3-r1
    • package became unstable on 'amd64' and on 'arm64'
      • added accept keywords to overlay profiles

  • dev-perl/File-Slurper:

    • from 0.14.0 to 0.14.0-r1
    • added IUSE flag 'minimal'
      • We enable it in profiles to drop the extra dependencies.
    • build dependencies:
      • dropped a dependency 'dev-perl/PerlIO-utf8_strict'
      • added a dependency 'dev-perl/PerlIO-utf8_strict' for USE '!minimal?'
    • runtime dependencies:
      • dropped a dependency 'dev-perl/PerlIO-utf8_strict'
      • added a dependency 'dev-perl/PerlIO-utf8_strict' for USE '!minimal?'

  • dev-python/charset-normalizer: [SYSEXT-PYTHON]

  • dev-python/cryptography:

  • dev-python/cython:

  • dev-python/ensurepip-pip: [AZURE] [DEV] [GCE] [SYSEXT-PYTHON]

    • from 25.2 to 25.3
    • build dependencies:
      • added a dependency '>=dev-python/flit-core-3.11.0[python_targets_pypy3_11(-)?,python_targets_python3_11(-)?,python_targets_python3_12(-)?,python_targets_python3_13(-)?,python_targets_python3_14(-)?]'
      • dropped a dependency '>=dev-python/setuptools-78.1.0[python_targets_pypy3_11(-)?,python_targets_python3_11(-)?,python_targets_python3_12(-)?,python_targets_python3_13(-)?,python_targets_python3_14(-)?]'
    • release notes: https://github.com/pypa/pip/blob/25.3/NEWS.rst

  • dev-python/idna: [SYSEXT-PYTHON]

  • dev-python/lark:

    • from 1.3.0 to 1.3.1
    • build dependencies:
      • added a dependency '>=dev-python/setuptools-scm-9.2.2[python_targets_pypy3_11(-)?,python_targets_python3_11(-)?,python_targets_python3_12(-)?,python_targets_python3_13(-)?,python_targets_python3_14(-)?]'
    • release notes: https://github.com/lark-parser/lark/releases/tag/1.3.1

  • dev-python/msgpack: [SYSEXT-PYTHON]

  • dev-python/pip: [SYSEXT-PYTHON]

    • from 25.2 to 25.3
    • build dependencies:
      • added a dependency '>=dev-python/flit-core-3.11.0[python_targets_pypy3_11(-)?,python_targets_python3_11(-)?,python_targets_python3_12(-)?,python_targets_python3_13(-)?,python_targets_python3_14(-)?]'
      • dropped a dependency '>=dev-python/setuptools-78.1.0[python_targets_pypy3_11(-)?,python_targets_python3_11(-)?,python_targets_python3_12(-)?,python_targets_python3_13(-)?,python_targets_python3_14(-)?]'
    • release notes: https://github.com/pypa/pip/blob/25.3/NEWS.rst

  • dev-python/setuptools-scm: [SYSEXT-PYTHON]

  • dev-python/tree-sitter:

  • dev-python/trove-classifiers: [SYSEXT-PYTHON]

  • dev-python/urllib3: [AZURE] [DEV] [SYSEXT-PYTHON]

    • from 2.5.0 to 2.6.3
    • fixes CVE-2025-66418, CVE-2025-66471
    • added IUSE flag 'verify-provenance'
      • some pypi specific check
    • build dependencies:
      • added a dependency 'dev-python/pypi-attestations' for USE 'verify-provenance?'
    • runtime dependencies:
      • changes for dev-python/brotlicffi with USE conditionals 'brotli?':
        • changed version constraint from >=0.8.0 to >=1.2.0.0
      • added a dependency '>=dev-python/backports-zstd-1.0.0[python_targets_pypy3_11(-)?,python_targets_python3_11(-)?,python_targets_python3_12(-)?,python_targets_python3_13(-)?]' for USE 'zstd?' -> 'python_targets_python3_12?'
      • dropped a dependency '>=dev-python/zstandard-0.18.0[python_targets_pypy3_11(-)?,python_targets_python3_11(-)?,python_targets_python3_12(-)?,python_targets_python3_13(-)?,python_targets_python3_14(-)?]' for USE 'zstd?'
    • release notes: https://raw.githubusercontent.com/urllib3/urllib3/refs/tags/2.6.3/CHANGES.rst

  • dev-util/maturin:

    • from 1.9.6 to 1.10.2
    • build dependencies:
      • changes for app-text/mdbook with USE conditionals 'doc?':
        • added version constraint >=0.5
      • changes for dev-lang/rust with USE conditionals '||':
        • changed version constraint from >=1.75.0 to >=1.83.0
      • changes for dev-lang/rust-bin with USE conditionals '||':
        • changed version constraint from >=1.75.0 to >=1.83.0
    • licenses:
      • dropped license 'Boost-1.0'
      • added license 'BZIP2'
      • dropped license 'Unicode-DFS-2016'
      • added license 'ZLIB'
      • dropped license 'CC-BY-4.0' for USE 'doc?'
    • release notes: https://github.com/PyO3/maturin/releases/tag/v1.10.2

  • dev-util/pkgcheck:

    • from 0.10.37 to 0.10.37-r1
    • build dependencies:
      • added a dependency '<dev-python/snakeoil-0.11.0[python_targets_python3_11(-)?,python_targets_python3_12(-)?,python_targets_python3_13(-)?,python_targets_python3_14(-)?]'
      • changes for sys-apps/pkgcore:
        • changed version constraint from >=0.12.30 to ~0.12.30
    • runtime dependencies:
      • added a dependency '<dev-python/snakeoil-0.11.0[python_targets_python3_11(-)?,python_targets_python3_12(-)?,python_targets_python3_13(-)?,python_targets_python3_14(-)?]'
      • changes for sys-apps/pkgcore:
        • changed version constraint from >=0.12.30 to ~0.12.30
    • added a patch to ignore new branding.eclass from some checks

  • dev-vcs/git: [PROD] [DEV]

  • eclass/branding.eclass:

    • added from Gentoo

  • eclass/cargo.eclass:

    • fixed builds for non-native multilib ABIs

  • eclass/check-reqs.eclass:

    • some memory checks for other platforms

  • eclass/cmake.eclass:

    • various fixes

  • eclass/desktop.eclass:

    • some fixes, added options

  • eclass/distutils-r1.eclass:

    • dropped parallel builds - too many issues
    • added support for passing JSON config settings to the build backend
    • export used PKG_CONFIG

  • eclass/elisp-common.eclass:

    • added support for EAPI 9

  • eclass/fcaps.eclass:

    • remove default value for owner/group

  • eclass/llvm-r1.eclass:

    • bumped llvm stable version to 21

  • eclass/meson.eclass:

    • fixed cross and multilib builds with rust
    • no need for exe wrapper on multilib builds

  • eclass/multilib.eclass:

    • fixed BUILD_ variables

  • eclass/pypi.eclass:

    • handle Google Cloud as provenance provider

  • eclass/ruby-utils.eclass:

    • bumped ruby versions

  • eclass/rust.eclass:

    • added support for llvm 21
    • doc fixes

  • eclass/selinux-policy-2.eclass:

    • added support for EAPI 8
    • unconditionally load all modules in the store in postinst
    • relabeling fixes
    • style fixes

  • eclass/toolchain-funcs.eclass:

    • fixed pattern for detecting ld.bfd

  • eclass/toolchain.eclass:

    • valgrind fixes
    • gcc 16 tls fixes
    • some nvptx accel fixes

  • licenses:

    • updated OPENLDAP

  • media-libs/libpng:

  • net-dns/bind: [PROD] [DEV]

  • net-libs/gnutls: [PROD] [DEV]

  • net-libs/libnftnl: [PROD] [DEV]

  • net-libs/libtirpc: [PROD] [DEV]

    • from 1.3.7 to 1.3.7-r2
    • fixes for musl

  • net-misc/curl: [PROD] [DEV]

  • net-misc/openssh: [PROD] [DEV]

    • still at 10.2_p1
    • package became stable on 'amd64' and 'arm64'
      • dropped accept keywords from overlay profiles

  • net-misc/rsync: [PROD] [DEV]

    • from 3.4.1 to 3.4.1-r1
    • IUSE flag 'xxhash' became enabled by default
      • speeds up transfers

  • profiles:

    • added selinux policy types expand variable
      • this will be used by selinux policy packages when they switch to eapi >=8

  • sec-policy/selinux-base: [PROD] [DEV]

  • sec-policy/selinux-base-policy: [PROD] [DEV]

  • sec-policy/selinux-container: [PROD] [DEV]

    • from 2.20250213-r1 to 2.20250618-r1
    • dependencies:
      • changes for sec-policy/selinux-base-policy:
        • changed version constraint from >=2.20250213-r1 to >=2.20250618-r1
    • runtime dependencies:
      • changes for sec-policy/selinux-base-policy:
        • changed version constraint from >=2.20250213-r1 to >=2.20250618-r1
    • release notes: https://github.com/SELinuxProject/refpolicy/releases/tag/RELEASE_2_20250618

  • sec-policy/selinux-dbus: [PROD] [DEV]

    • from 2.20250213-r1 to 2.20250618-r1
    • dependencies:
      • changes for sec-policy/selinux-base-policy:
        • changed version constraint from >=2.20250213-r1 to >=2.20250618-r1
    • runtime dependencies:
      • changes for sec-policy/selinux-base-policy:
        • changed version constraint from >=2.20250213-r1 to >=2.20250618-r1
    • release notes: https://github.com/SELinuxProject/refpolicy/releases/tag/RELEASE_2_20250618

  • sec-policy/selinux-policykit: [PROD] [DEV]

    • from 2.20250213-r1 to 2.20250618-r1
    • dependencies:
      • changes for sec-policy/selinux-base-policy:
        • changed version constraint from >=2.20250213-r1 to >=2.20250618-r1
    • runtime dependencies:
      • changes for sec-policy/selinux-base-policy:
        • changed version constraint from >=2.20250213-r1 to >=2.20250618-r1
    • release notes: https://github.com/SELinuxProject/refpolicy/releases/tag/RELEASE_2_20250618

  • sec-policy/selinux-sssd: [PROD] [DEV]

    • from 2.20250213-r1 to 2.20250618-r1
    • dependencies:
      • changes for sec-policy/selinux-base-policy:
        • changed version constraint from >=2.20250213-r1 to >=2.20250618-r1
    • runtime dependencies:
      • changes for sec-policy/selinux-base-policy:
        • changed version constraint from >=2.20250213-r1 to >=2.20250618-r1
    • release notes: https://github.com/SELinuxProject/refpolicy/releases/tag/RELEASE_2_20250618

  • sec-policy/selinux-unconfined: [PROD] [DEV]

    • from 2.20250213-r1 to 2.20250618-r1
    • dependencies:
      • changes for sec-policy/selinux-base-policy:
        • changed version constraint from >=2.20250213-r1 to >=2.20250618-r1
    • runtime dependencies:
      • changes for sec-policy/selinux-base-policy:
        • changed version constraint from >=2.20250213-r1 to >=2.20250618-r1
    • release notes: https://github.com/SELinuxProject/refpolicy/releases/tag/RELEASE_2_20250618

  • sys-apps/coreutils: [PROD] [DEV]

  • sys-apps/diffutils: [PROD] [DEV]

    • still at 3.12
    • use branding eclass

  • sys-apps/findutils: [PROD] [DEV]

    • still at 4.10.0
    • use branding eclass

  • sys-apps/grep: [PROD] [DEV]

    • still at 3.12
    • use branding eclass

  • sys-apps/kbd: [PROD] [DEV]

    • from 2.9.0 to 2.9.0-r1
    • use autotools eclass to call autoreconf - this brings the deps below
    • build dependencies:
      • added a dependency '>=app-portage/elt-patches-20250306'
      • added a dependency '>=dev-build/libtool-2.4.7-r3'
      • added a dependency 'sys-devel/gnuconfig'
      • added a dependency '>=dev-build/automake-1.18:1.18' for USE '||'
      • added a dependency '>=dev-build/automake-1.17-r1:1.17' for USE '||'
      • added a dependency '>=dev-build/autoconf-2.72-r1:2.72' for USE '||'

  • sys-apps/kexec-tools: [PROD] [DEV]

  • sys-apps/locale-gen:

    • from 3.9-r1 to 3.9-r2
    • added patch fixing selinux issue

  • sys-apps/lsb-release:

    • still at 3.3
    • use branding eclass

  • sys-apps/nvme-cli: [PROD] [DEV]

    • from 2.15 to 2.16
    • dependencies:
      • changes for sys-libs/libnvme:
        • changed version constraint from >=1.15 to >=1.16
    • runtime dependencies:
      • changes for sys-libs/libnvme:
        • changed version constraint from >=1.15 to >=1.16
    • release notes: https://github.com/linux-nvme/nvme-cli/releases/tag/v2.16

  • sys-apps/pkgcore:

    • from 0.12.30 to 0.12.30-r1
    • build dependencies:
      • added a dependency '<dev-python/snakeoil-0.11.0[python_targets_python3_11(-)?,python_targets_python3_12(-)?,python_targets_python3_13(-)?,python_targets_python3_14(-)?]'
    • runtime dependencies:
      • added a dependency '<dev-python/snakeoil-0.11.0[python_targets_python3_11(-)?,python_targets_python3_12(-)?,python_targets_python3_13(-)?,python_targets_python3_14(-)?]'

  • sys-apps/portage: [DEV]

  • sys-apps/pv:

  • sys-apps/sed: [PROD] [DEV]

    • still at 4.9-r1
    • use branding eclass

  • sys-apps/systemd: [PROD] [DEV]

  • sys-apps/usbutils: [PROD] [DEV]

  • sys-auth/pambase: [PROD] [DEV]

  • sys-block/thin-provisioning-tools: [PROD] [DEV]

    • from 1.3.0 to 1.3.1
    • package became stable on 'amd64' and 'arm64'
      • dropped accept keywords from overlay profiles
    • added IUSE flag 'llvm_slot_21'
      • LLVM 21 support
    • build dependencies:
      • added a dependency 'dev-lang/rust:1.89.0[llvm_slot_20]' for USE 'llvm_slot_20?' -> '||'
      • added a dependency 'dev-lang/rust-bin:1.89.0[llvm_slot_20]' for USE 'llvm_slot_20?' -> '||'
      • added a dependency 'llvm-core/clang:21' for USE 'llvm_slot_21?'
      • changes for dev-lang/rust with USE conditionals '||':
        • USE conditionals changed to 'llvm_slot_21?' -> '||'
        • dropped version constraint
        • changed slot constraint from * to 9999
        • added llvm_slot_21 use enabled requirement (must exist, no pretending if missing)
      • added a dependency 'dev-lang/rust:1.91.0[llvm_slot_21]' for USE 'llvm_slot_21?' -> '||'
      • changes for dev-lang/rust-bin with USE conditionals '||':
        • USE conditionals changed to 'llvm_slot_21?' -> '||'
        • dropped version constraint
        • changed slot constraint from * to 9999
        • added llvm_slot_21 use enabled requirement (must exist, no pretending if missing)
      • added a dependency 'dev-lang/rust-bin:1.91.0[llvm_slot_21]' for USE 'llvm_slot_21?' -> '||'
    • release notes: https://raw.githubusercontent.com/device-mapper-utils/thin-provisioning-tools/refs/tags/v1.3.1/CHANGES

  • sys-boot/grub:

    • from 2.12-r7 to 2.12-r11
    • added IUSE flag 'branding'
      • pulls in Gentoo theme, disabled in Flatcar
    • runtime dependencies:
      • added a dependency '>=sys-boot/grub-themes-gentoo-1.0-r1' for USE 'branding?'

  • sys-devel/binutils: [DEV]

  • sys-devel/binutils-config: [PROD] [DEV]

  • sys-devel/crossdev:

  • sys-devel/gcc: [PROD] [DEV]

    • from 14.3.1_p20250801 to 15.2.1_p20251122
    • added IUSE flag 'libgdiagnostics'
      • for building gcc diagnostics library, not relevant to Flatcar
    • added IUSE flag 'cobol'
      • something something business oriented language, perhaps
    • build dependencies:
      • changes for dev-lang/ada-bootstrap with USE conditionals 'ada?' -> '||':
        • changed version constraint from <15 to <16
      • changes for sys-devel/gcc with USE conditionals 'ada?' -> '||':
        • changed version constraint from <15 to <16
      • changes for sys-devel/gcc with USE conditionals 'd?':
        • USE conditionals changed to 'd?' -> '||'
        • changed version constraint from <15 to <16
      • added a dependency 'sys-devel/gcc:11' for USE 'd?' -> '||'
      • dropped a dependency 'dev-debug/valgrind' for USE 'valgrind?'
    • dependencies:
      • added a dependency 'dev-debug/valgrind' for USE 'valgrind?'
    • release notes: https://gcc.gnu.org/gcc-15/changes.html

  • sys-devel/gcc-config: [DEV]

  • sys-devel/m4:

    • still at 1.4.20
    • use branding eclass

  • sys-fs/btrfs-progs: [PROD] [DEV]

  • sys-fs/cryptsetup: [PROD] [DEV]

    • from 2.8.1 to 2.8.1-r1
    • dependencies:
      • added a dependency 'net-libs/libssh[sftp(+)]' for USE 'ssh?'
      • added a dependency 'net-libs/libssh[sftp(+)]' for USE 'static?' -> 'ssh?'
      • added a dependency 'net-libs/libssh[sftp(+)]' for USE 'static-libs?' -> 'ssh?'
    • runtime dependencies:
      • added a dependency 'net-libs/libssh[sftp(+)]' for USE 'ssh?'
      • added a dependency 'net-libs/libssh[sftp(+)]' for USE 'static-libs?' -> 'ssh?'

  • sys-fs/erofs-utils:

    • from 1.8.10 to 1.8.10-r1
    • moved the accept keywords to base profile
    • dependencies:
      • added a dependency 'app-arch/libdeflate:0=' for USE 'libdeflate?'
      • dropped a dependency 'app-arch/libdeflate:0=' for USE 'zlib?' -> 'libdeflate?'
      • changes for virtual/zlib with USE conditionals 'zlib?' -> '!libdeflate?':
        • USE conditionals changed to 'zlib?'
    • runtime dependencies:
      • added a dependency 'app-arch/libdeflate:0=' for USE 'libdeflate?'
      • dropped a dependency 'app-arch/libdeflate:0=' for USE 'zlib?' -> 'libdeflate?'
      • changes for virtual/zlib with USE conditionals 'zlib?' -> '!libdeflate?':
        • USE conditionals changed to 'zlib?'

  • sys-fs/fuse-common: [SYSEXT-INCUS] [SYSEXT-PODMAN] [VMWARE]

    • from 3.10.4 to 3.10.4-r2
    • EAPI changed from '7' to '8'
    • runtime dependencies:
      • added a dependency 'acct-group/cuse'
      • added a dependency 'virtual/tmpfiles'

  • sys-fs/lxcfs: [SYSEXT-INCUS]

  • sys-fs/squashfs-tools: [DEV] [SYSEXT-INCUS]

  • sys-fs/xfsprogs: [PROD] [DEV]

  • sys-fs/zfs: [SYSEXT-ZFS]

    • from 2.3.3 to 2.3.4
    • package became unstable on 'arm64'
      • added accept keywords to overlay profiles
    • post dependencies:
      • changes for sys-fs/zfs-kmod with USE conditionals 'dist-kernel?':
        • changed version constraint from ~2.3.3 to ~2.3.4
    • runtime dependencies:
      • changes for sys-fs/zfs-kmod with USE conditionals '!kernel-builtin?':
        • changed version constraint from ~2.3.3 to ~2.3.4
    • release notes: https://github.com/openzfs/zfs/releases/tag/zfs-2.3.4

  • sys-fs/zfs-kmod: [SYSEXT-ZFS]

    • from 2.3.3 to 2.3.4
    • package became unstable on 'arm64'
      • added accept keywords to overlay profiles
    • post dependencies:
      • changes for sys-fs/zfs with USE conditionals 'dist-kernel?':
        • changed version constraint from ~2.3.3 to ~2.3.4
    • runtime dependencies:
      • changes for virtual/dist-kernel with USE conditionals 'dist-kernel-cap?' -> 'dist-kernel?':
        • changed version constraint from <6.16 to <6.17
    • release notes: https://github.com/openzfs/zfs/releases/tag/zfs-2.3.4

  • sys-libs/binutils-libs: [PROD] [DEV]

  • sys-libs/libcap: [PROD] [DEV]

  • sys-libs/libnvme: [PROD] [DEV]

  • sys-libs/libseccomp: [PROD] [DEV]

    • from 2.6.0-r2 to 2.6.0-r3
    • runtime dependencies:
      • dropped a dependency '>=sys-kernel/linux-headers-5.15'

  • sys-libs/libselinux: [PROD] [DEV]

    • from 3.8.1 to 3.8.1-r3
    • fixed python handling (run in multilib context, use distutils)
      • using our custom ebuild to avoid pulling in python unconditionally
    • added IUSE flag 'debug'
      • added by distutils eclass, mostly for extension building
    • build dependencies:
      • added a dependency '>=dev-python/gpep517-16[python_targets_python3_11(-)?,python_targets_python3_12(-)?,python_targets_python3_13(-)?,python_targets_python3_14(-)?]'
      • added a dependency '>=dev-python/setuptools-78.1.0[python_targets_python3_11(-)?,python_targets_python3_12(-)?,python_targets_python3_13(-)?,python_targets_python3_14(-)?]'
      • added a dependency 'dev-lang/python:3.12' for USE 'python_targets_python3_12?'
    • dependencies:
      • added a dependency 'dev-lang/python:3.12' for USE 'python_targets_python3_12?'
    • runtime dependencies:
      • added a dependency 'dev-lang/python:3.12' for USE 'python_targets_python3_12?'

  • sys-libs/pam: [PROD] [DEV]

    • still at 1.7.1-r2
    • build dependencies:
      • dropped a dependency 'sec-keys/openpgp-keys-strace' for USE 'verify-sig?'
      • added a dependency 'sec-keys/openpgp-keys-pam' for USE 'verify-sig?'

  • sys-libs/readline: [PROD] [DEV]

  • sys-process/procps: [PROD] [DEV]

    • from 4.0.5-r2 to 4.0.5-r3
    • added two patches with fixes

  • virtual/perl-Exporter:

    • from 5.780.0 to 5.790.0
    • runtime dependencies:
      • changes for perl-core/Exporter weak blocker:
        • changed version constraint from <5.780.0 to <5.790.0
      • changes for perl-core/Exporter weak blocker:
        • changed version constraint from >5.780.0-r999 to >5.790.0-r999
      • changes for dev-lang/perl with USE conditionals '||':
        • changed version constraint from =5.40* to =5.42*
      • changes for perl-core/Exporter with USE conditionals '||':
        • changed version constraint from ~5.780.0 to ~5.790.0

  • virtual/perl-ExtUtils-MakeMaker:

    • from 7.700.0-r1 to 7.760.0
    • runtime dependencies:
      • changes for perl-core/ExtUtils-MakeMaker weak blocker:
        • changed version constraint from <7.700.0 to <7.760.0
      • changes for perl-core/ExtUtils-MakeMaker weak blocker:
        • changed version constraint from >7.700.0-r999 to >7.760.0-r999
      • changes for dev-lang/perl with USE conditionals '||':
        • changed version constraint from =5.40* to =5.42*
      • dropped a dependency '=dev-lang/perl-5.38*' for USE '||'
      • changes for perl-core/ExtUtils-MakeMaker with USE conditionals '||':
        • changed version constraint from ~7.700.0 to ~7.760.0

  • x11-drivers/nvidia-drivers: [SYSEXT-NVIDIA-DRIVERS-570] [SYSEXT-NVIDIA-DRIVERS-570-OPEN]

    • from 570.195.03 to 570.207
    • release notes: none

  • x11-libs/pixman:

--

  • changelog
  • image diff

@github-actions github-actions bot added the main label Jan 12, 2026
This was referenced Jan 12, 2026
Closed
Closed
@krnowak krnowak force-pushed the buildbot/weekly-portage-stable-package-updates-2026-01-12 branch from 36876e9 to 278624c Compare January 21, 2026 14:07
@krnowak krnowak force-pushed the buildbot/weekly-portage-stable-package-updates-2026-01-12 branch from 278624c to 24a935b Compare January 21, 2026 14:17
@github-actions github-actions bot mentioned this pull request Jan 22, 2026
Open
@dongsupark dongsupark mentioned this pull request Jan 22, 2026
Open
This was referenced Feb 10, 2026
Open
Open
This was referenced Feb 18, 2026
Closed
Closed
Closed
Closed
@krnowak krnowak force-pushed the buildbot/weekly-portage-stable-package-updates-2026-01-12 branch from b1cabd6 to c54bbad Compare February 18, 2026 12:17
@krnowak krnowak force-pushed the buildbot/weekly-portage-stable-package-updates-2026-01-12 branch from c54bbad to 71f89e4 Compare February 18, 2026 12:22
Flatcar Buildbot added 5 commits February 20, 2026 12:13
@krnowak
dev-python/pycparser: Sync with Gentoo
910f6d0 
It's from Gentoo commit 2d25fad95cbaa525c8945d8e582c749d49524f49.

Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
@krnowak
dev-python/pysocks: Sync with Gentoo
56cf300 
It's from Gentoo commit 2d25fad95cbaa525c8945d8e582c749d49524f49.

Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
@krnowak
dev-python/setuptools-scm: Sync with Gentoo
481431d 
It's from Gentoo commit 2d25fad95cbaa525c8945d8e582c749d49524f49.

Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
@krnowak
dev-python/six: Sync with Gentoo
384f431 
It's from Gentoo commit 2d25fad95cbaa525c8945d8e582c749d49524f49.

Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
@krnowak
dev-python/snakeoil: Sync with Gentoo
a73267b 
It's from Gentoo commit f5023fee5b7d8f9fa13c4da5906cdba9d4ff9a97.

Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>
krnowak added 16 commits February 20, 2026 12:13
@krnowak
overlay coreos/user-patches: Update a patch for sec-policy packages
86df9b8 
Dropped a modification in system/logging module - it was redundant.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
@krnowak
overlay coreos/user-patches: Regenerate patches for sys-apps/systemd
0656bf0 
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
@krnowak
overlay coreos/user-patches: Regenerate patches for sys-auth/pambase
e7075f6 
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
@krnowak
overlay coreos/user-patches: Regenerate patches for sys-block/thin-pr…
81bdd8e 
…ovisioning-tools

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
@krnowak
dev-perl/PerlIO-utf8_strict, virtual/perl-XSLoader: Drop unused packages
3753b09 
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
@krnowak
.github: Update package list
7d1c684 
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
@krnowak
build_library: Fix setting gcc profile with latest gcc-config
59ef07e 
In order to fix some bash-completion issues, the output of "gcc-config
-l" has changed slightly - it received one more leading space in the
output.

Old output:

 [1] aarch64-cros-linux-gnu-15 *

New output:

  [1] aarch64-cros-linux-gnu-15 *

This has added another field from cut's point of view, as it was
splitting the line into fields by single spaces, which means that
instead of getting "aarch64-cros-linux-gnu-15" we were getting
"[1]". This has caused grep to match nothing, setting the error status
in PIPESTATUS and finally a function failure.

Instead of fiddling with leading empty fields, just strip the leading
spaces, dammit.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
@krnowak
overlay coreos/config: Add a gcc15 workaround for net-analyzer/netperf
316c244 
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
@krnowak
overlay coreos/config: Fix agent binaries locations
3b39332 
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
@krnowak
sys-libs/libselinux: Add our ebuild fixing some python issues
f66ed62 
Hopefully this will be taken by upstream too, so it won't be
clobberred on next update.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
@krnowak
overlay profiles: Add accept keywords for sys-libs/libselinux
2cccf38 
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
@krnowak
build_library/catalyst_toolchains: Copy binaries from sysroot too
2059628 
Any meson package now uses sysroot.eclass as a part of the cross-file
creation and the eclass requires ld.so and ldd to be available in
${ROOT}/usr/bin, so copy over the bin and sbin directories too, just
in case.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
@krnowak
build_packages: Break a new circular dependency
9774ded 
Looks like enabling sssd in sys-auth/pambase created a new cycle:

sys-auth/pambase[sssd] -> sys-auth/sssd -> sys-apps/shadow[pam] -> sys-auth/pambase

Let's break it up at pambase. Also fix a mistake in a comment and sort
the USE flags alphabetically.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
@krnowak
overlay sys-fs/overlaybd: Append a build fix to photon cross patch
4cb33d0 
It is not exactly a cross fix, but it may serve as a single place for
photon fixes. This time overlaybd stopped compiling with gcc15 due to
missing inclusion of cstdint to get a definition of uint64_t. Most
likely some other header used to pull it in, but now it does not.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
@krnowak
overlay sys-fs/overlaybd: Another patch fixing build with gcc 15
0e130f4 
This time in overlaybd itself. Also regenerate the offline build
patch, so it can be easily applied using `git am`.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
@krnowak
overlay coreos/user-patches: Add a patch for app-containers/containerd
6346855 
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
@krnowak krnowak force-pushed the buildbot/weekly-portage-stable-package-updates-2026-01-12 branch from bb21824 to 55721e0 Compare February 20, 2026 11:16
@krnowak krnowak marked this pull request as ready for review February 20, 2026 11:16
@krnowak krnowak requested a review from a team as a code owner February 20, 2026 11:16
@krnowak
Copy link
Member

krnowak commented Feb 20, 2026

CI mostly passed - the only failing test is bpf.execsnoop. The functionality tested there still works, but prints some extra warnings. I think it can be addressed by updating our bcc docker image. It's not a blocker for this PR IMO, but will look into it anyway.

@krnowak krnowak moved this from ⚒️ In Progress to ✅ Testing / in Review in Flatcar tactical, release planning, and roadmap Feb 20, 2026
dongsupark
dongsupark approved these changes Feb 20, 2026
View reviewed changes
Copy link
Member

@dongsupark dongsupark left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

From a quick look, it looks good.
Minor things below:

@krnowak
changelog: Add entries
107ab58 
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
@krnowak krnowak force-pushed the buildbot/weekly-portage-stable-package-updates-2026-01-12 branch from 55721e0 to 107ab58 Compare February 20, 2026 14:25
chewi
chewi approved these changes Feb 20, 2026
View reviewed changes
Copy link
Contributor

@chewi chewi left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you very much for this. I know it was a tough one.

I had hoped it would include my most recent sysroot.eclass fixes. Most of them aren't needed for Flatcar, but one is required for the arm64 SDK. I probably won't touch that until I'm back from the trip, but I guess I can just pull the fix in my branch for Adrian the meantime.

@krnowak krnowak merged commit 420c84f into main Feb 20, 2026
4 of 5 checks passed
@github-project-automation github-project-automation bot moved this from ✅ Testing / in Review to Implemented in Flatcar tactical, release planning, and roadmap Feb 20, 2026
@krnowak krnowak deleted the buildbot/weekly-portage-stable-package-updates-2026-01-12 branch February 20, 2026 15:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@krnowak krnowak krnowak left review comments

@chewi chewi chewi approved these changes

@dongsupark dongsupark dongsupark approved these changes

Assignees

No one assigned

Labels

main

Projects

Flatcar tactical, release planning, and roadmap
Status: Implemented

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

update: urllib3 update: net-dns/bind update: gnutls update: libarchive update: podman

3 participants

@krnowak @chewi @dongsupark