packages/utils, branch master

aliyun-cli: update to 3.4.0

2026-06-24T05:39:16Z

Changelog: https://github.com/aliyun/aliyun-cli/compare/v3.2.9...v3.4.0 Signed-off-by: Bruce Chen

catatonit: update to 0.2.1

2026-06-23T14:50:16Z

This is a regular update with no disruptive changes. changelog:https://github.com/openSUSE/catatonit/releases/tag/v0.2.1 Signed-off-by: nantayo

crun: update to 1.28

2026-06-23T14:48:58Z

- remove outdated patch file It was fixed upstream in containers/crun@9acf13d, so the patch file is no longer required. - replace yajl with json-c The JSON backend was switched from YAJL to json-c in containers/crun@b62cfdd, so --enable-embedded-yajl should be removed from CONFIGURE_ARGS and libjson-c should be add as a new dependency Signed-off-by: nantayo

haveged: update to 1.9.24

2026-06-23T13:40:19Z

Update to version 1.9.24. (Mostly security fixes) Signed-off-by: Hannu Nyman

watchcat: add optional failure timer reset

2026-06-23T06:16:47Z

Add an opt-in reset_failure_timer option for restart_iface and run_script modes. When enabled, watchcat starts a fresh failure window after the recovery action finishes before allowing another recovery action. The existing behavior remains the default. Document the intended default and reset_failure_timer timing behavior in TIMINGS.md and use a safer string comparison for the reset_failure_timer check. Signed-off-by: Dharmik Parmar

watchcat: clarify restart log wording

2026-06-23T06:16:47Z

Clarify the restart_iface logging so the message reflects that the configured action happens only after the failure period is reached. Signed-off-by: Dharmik Parmar

lxc: update to 7.0.0

2026-06-21T15:25:02Z

Swtich to upstream recommended 7.0 LTS branch[1] which includes a fix for CVE-2026-39402. Full changelog: https://github.com/lxc/lxc/releases/tag/v7.0.0 - Removed patches/021-remove-legacy-cgroup-support.patch due upstream deprecated CGroupV1 support. - Modified files/lxc-auto.init to remove the boot() function which mounted legacy cgroup1 stuff as well. This PR will superceed https://github.com/openwrt/packages/pull/27757 as a result. - Added a version check script for the CI. - Fix another CI failure with -Dmemfd-rexec=false Note this release adds the ability to introduce landlock-sandboxing the monitor process but that would depend on CONFIG_SECURITY_LANDLOCK in the kernel. This can be added in a future PR if there is interest. 1. https://discuss.linuxcontainers.org/t/lxc-7-0-lts-has-been-released/26612#p-90585-support-and-upgrade-8 Build system: x86/64 Build-tested: x86/64-glibc Run-tested: x86/64-glibc Signed-off-by: John Audia

treewide: musl-fts is only needed when using MUSL

2026-06-20T21:06:22Z

Two packages (fluent-bit and nnn) don't properly gate musl-fts as only required when using MUSL. Signed-off-by: Philip A. Prindeville

bash: update to 5.3 patch level 15

2026-06-20T16:48:35Z

- Fix technically undefined behavior when comparing return value from realloc to the original pointer - Update mapfile patch 11, removing stray line and improving the efficiency of the original fix - Fix read builtin to avoid cases where -1 is used as an index into the input buffer Signed-off-by: Wei-Ting Yang

podman: update to 5.8.3

2026-06-14T17:36:05Z

- adjust makefile - refresh patch Signed-off-by: nantayo