Weekly portage-stable package updates 2026-05-25 by github-actions[bot] · Pull Request #4047 · flatcar/scripts

github-actions · 2026-05-25T08:41:17Z

CI: https://jenkins.flatcar.org/job/container/job/sdk/59/cldsv/

Closes flatcar/Flatcar#2051
Closes flatcar/Flatcar#2053
Closes flatcar/Flatcar#2062
Closes flatcar/Flatcar#2066
Closes flatcar/Flatcar#2069
Closes flatcar/Flatcar#2073
Closes flatcar/Flatcar#2074
Closes flatcar/Flatcar#2082
Closes flatcar/Flatcar#2087
Closes flatcar/Flatcar#2088
Closes flatcar/Flatcar#2120
Closes flatcar/Flatcar#2153

Partially addresses flatcar/Flatcar#2050
Partially addresses flatcar/Flatcar#2049
Partially addresses flatcar/Flatcar#2155
Partially addresses flatcar/Flatcar#2157

Security issue for nvidia-drivers is addressed partially as only 535 line adressed that. Other lines we have (550 and 570) are EOL and are moved to coreos-overlay as x11-drivers/old-nvidia-drivers. Dropping of the old nvidia drivers and adding newer versions should be done in different PR.

--

app-arch/libarchive: [PROD] [DEV]
- from 3.8.5 to 3.8.7
- fixes CVE-2026-4426
  - update: libarchive Flatcar#2053
- package became stable on 'amd64' and 'arm64'
  - dropped accept keywords from overlay profiles
- dependencies:
  - added a dependency 'virtual/os-headers'
  - added a dependency 'sys-fs/e2fsprogs[abi_x86_32(-)?,abi_x86_64(-)?,abi_x86_x32(-)?,abi_mips_n32(-)?,abi_mips_n64(-)?,abi_mips_o32(-)?,abi_s390_32(-)?,abi_s390_64(-)?]' for USE 'e2fsprogs?'
  - dropped a dependency 'virtual/os-headers' for USE 'kernel_linux?'
  - dropped a dependency 'sys-fs/e2fsprogs[abi_x86_32(-)?,abi_x86_64(-)?,abi_x86_x32(-)?,abi_mips_n32(-)?,abi_mips_n64(-)?,abi_mips_o32(-)?,abi_s390_32(-)?,abi_s390_64(-)?]' for USE 'kernel_linux?' -> 'e2fsprogs?'
- release notes: https://github.com/libarchive/libarchive/releases/tag/v3.8.7 https://github.com/libarchive/libarchive/releases/tag/v3.8.6
app-arch/xz-utils: [PROD] [DEV]
- from 5.8.2 to 5.8.3
- fixes CVE-2026-34743
  - update: app-arch/xz-utils Flatcar#2066
- release notes: https://github.com/tukaani-project/xz/releases/tag/v5.8.3
app-containers/containerd: [SYSEXT-CONTAINERD]
- from 2.2.1 to 2.2.2
- dropped our patches, they are in the update
- release notes: https://github.com/containerd/containerd/releases/tag/v2.2.2
app-containers/cri-tools: [PROD] [DEV]
- still at 1.33.0
- drop our patch - it's being brought through FILESDIR now
- build dependencies:
  - changes for dev-lang/go:
    - changed version constraint from >=1.20 to >=1.24.1
    - dropped slot constraint
  - added a dependency '>=dev-lang/go-1.24.11:='
app-containers/docker-cli: [SYSEXT-DOCKER]
- still at 29.1.3
- dropped unnecessary cross-compilation fix
app-crypt/adcli: [PROD] [DEV]
- from 0.9.2 to 0.9.3.1
- added IUSE flag 'netapi'
  - for Samba's offline join feature, disabled
- added IUSE flag 'selinux'
- dependencies:
  - added a dependency 'net-fs/samba' for USE 'netapi?'
- runtime dependencies:
  - added a dependency 'net-fs/samba' for USE 'netapi?'
  - added a dependency 'sec-policy/selinux-kerberos' for USE 'selinux?'
- release notes: https://gitlab.freedesktop.org/realmd/adcli/-/releases/0.9.3.1 https://gitlab.freedesktop.org/realmd/adcli/-/releases/0.9.3a
app-crypt/clevis: [PROD] [DEV]
- from 19-r1 to 19-r2
- added a patch fixing cryptsetup with dracut 110
app-crypt/gnupg: [PROD] [DEV]
- from 2.5.17-r2 to 2.5.18
- release notes: https://lists.gnupg.org/pipermail/gnupg-announce/2017q1/000401.html
app-doc/eclass-manpages:
- from 20260124 to 20260426
- release notes: none
app-editors/nano:
- from 8.7.1 to 9.0
- release notes: https://lists.gnu.org/archive/html/info-nano/2026-04/msg00001.html
app-emulation/qemu:
- from 10.2.0-r1 to 10.2.2
- release notes: https://lists.nongnu.org/archive/html/qemu-devel/2026-03/msg05601.html
app-emulation/virt-firmware:
- from 24.11 to 26.2
- release notes: none
app-portage/gentoolkit: [DEV]
- from 0.7.1 to 0.7.2
- release notes: https://codeberg.org/gentoo/gentoolkit/commits/tag/gentoolkit-0.7.2
app-portage/getuto: [DEV]
- from 1.15-r1 to 1.18
- release notes: https://github.com/projg2/getuto/commits/getuto-1.18/
app-portage/portage-utils:
- from 0.97 to 0.97.1
- release notes: https://gitweb.gentoo.org/proj/portage-utils.git/log/?h=v0.97.1
dev-build/autoconf-wrapper:
- from 20231224 to 20260320
- release notes: https://gitweb.gentoo.org/proj/autotools-wrappers.git/log/?h=at-20260320
dev-build/cmake:
- from 4.1.4 to 4.3.3
- release notes: https://cmake.org/cmake/help/v4.3/release/4.3.html https://cmake.org/cmake/help/v4.2/release/4.2.html
dev-cpp/azure-core:
- from 1.16.2 to 1.16.3
- release notes: https://github.com/Azure/azure-sdk-for-cpp/releases/tag/azure-core_1.16.3
dev-db/sqlite: [PROD] [DEV]
- from 3.51.2 to 3.51.3
- release notes: https://sqlite.org/releaselog/3_51_3.html
dev-lang/go:
- from 1.25.8 to 1.26.3
- fixes CVE-2026-27140, CVE-2026-27143, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501
  - update: go Flatcar#2157 (partially)
- EAPI changed from '8' to '9'
- package became unstable on 'amd64' and 'arm64'
  - added accept keywords to overlay profiles
- build dependencies:
  - changes for dev-lang/go with USE conditionals '||':
    - changed version constraint from >=1.22.12 to >=1.24.6
  - changes for dev-lang/go-bootstrap with USE conditionals '||':
    - changed version constraint from >=1.22.12 to >=1.24.6
- release notes: https://go.dev/doc/go1.26
dev-lang/go-bootstrap:
- from 1.22.12 to 1.24.6
- release notes: https://go.dev/doc/go1.24
dev-lang/python: [AZURE] [DEV] [GCE] [SYSEXT-PYTHON]
- from 3.12.12 to 3.12.13_p1
- release notes: https://www.python.org/downloads/release/python-31213/
dev-lang/rust:
- from 1.92.0_p1-r1 to 1.93.1
- IUSE flag 'doc' became enabled by default
  - disabled in Flatcar profiles
- IUSE flag 'rustfmt' became enabled by default
  - disabled in Flatcar profiles
- IUSE flag 'clippy' became enabled by default
  - disabled in Flatcar profiles
- build dependencies:
  - added a dependency 'dev-lang/rust:1.93.1' for USE '||'
  - added a dependency 'dev-lang/rust-bin:1.93.1' for USE '||'
- release notes: https://blog.rust-lang.org/2026/02/12/Rust-1.93.1/ https://blog.rust-lang.org/2026/01/22/Rust-1.93.0/
dev-libs/elfutils: [PROD] [DEV]
- from 0.194-r1 to 0.195
- release notes: https://inbox.sourceware.org/elfutils-devel/CAJDtP-Qok4ViNzvrr28WgkCCqrFH0iAZStiD8C7nbpDhrPzLWA@mail.gmail.com/T/
dev-libs/expat: [PROD] [DEV]
- from 2.7.5 to 2.8.1
- fixes CVE-2026-41080 CVE-2026-45186
  - update: expat Flatcar#2153
- release notes: https://blog.hartwork.org/posts/expat-2-8-1-released/ https://blog.hartwork.org/posts/expat-2-8-0-released/
dev-libs/glib: [PROD] [DEV]
- from 2.84.4-r2 to 2.84.4-r5
- package became stable on 'amd64' and 'arm64'
  - dropped accept keywords from overlay profiles
dev-libs/jose: [PROD] [DEV]
- still at 14
- package became stable on 'amd64' and received a keyword for 'arm64'
  - updated accept keywords in overlay profiles
dev-libs/libdnet: [VMWARE]
- from 1.18.0-r3 to 1.18.2
- release notes: https://github.com/ofalk/libdnet/releases/tag/libdnet-1.18.2
dev-libs/libgcrypt: [PROD] [DEV]
- from 1.11.2-r1 to 1.12.2
- fixes CVE-2026-41989
  - update: libgcrypt Flatcar#2088
- dependencies:
  - changes for dev-libs/libgpg-error:
    - changed version constraint from >=1.49 to >=1.56
- runtime dependencies:
  - changes for dev-libs/libgpg-error:
    - changed version constraint from >=1.49 to >=1.56
- release notes: https://dev.gnupg.org/T8114.html https://dev.gnupg.org/T8067.html https://lists.gnupg.org/pipermail/gnupg-announce/2026q1/000502.html
dev-libs/libgpg-error: [PROD] [DEV]
- from 1.58 to 1.59
- release notes: https://dev.gnupg.org/T7974.html
dev-libs/libksba: [PROD] [DEV]
- from 1.6.7 to 1.6.8
- release notes: https://dev.gnupg.org/T7174.html
dev-libs/libsodium: [PROD] [DEV]
- from 1.0.21_p20260122 to 1.0.22
- release notes: https://github.com/jedisct1/libsodium/releases/tag/1.0.22-RELEASE
dev-libs/libtraceevent:
- from 1.8.4 to 1.9.0
- package became unstable on 'arm64'
  - added accept keywords to overlay profiles
- release notes: https://lwn.net/Articles/1057413/
dev-libs/libtracefs:
- from 1.8.2 to 1.8.3
- release notes: none
dev-libs/libxml2: [PROD] [DEV]
- from 2.15.1 to 2.15.3
- dropped unnecessary user patches
- fixes CVE-2026-0989, CVE-2026-0990, CVE-2026-0992, CVE-2026-1757, libxml2-20260415
  - update: libxml2 Flatcar#2049 (partially)
- package became unstable on 'amd64' and 'arm64'
  - added accept keywords to overlay profiles
- release notes: https://gitlab.gnome.org/GNOME/libxml2/-/raw/v2.15.3/NEWS https://gitlab.gnome.org/GNOME/libxml2/-/raw/v2.15.2/NEWS
dev-libs/mpc: [DEV]
- from 1.3.1 to 1.4.1
- release notes: https://gitlab.inria.fr/mpc/mpc/-/raw/1.4.1/NEWS https://gitlab.inria.fr/mpc/mpc/-/raw/1.4.0/NEWS
dev-libs/openssl: [PROD] [DEV]
- from 3.5.5-r2 to 3.5.6
- fixes CVE-2026-2673, CVE-2026-28386, CVE-2026-28387, CVE-2026-28388, CVE-2026-28389, CVE-2026-28390, CVE-2026-31790
  - update: openssl Flatcar#2051
- release notes: https://openssl-library.org/post/2026-04-07-release-announcement/
dev-libs/tree-sitter:
- from 0.25.10 to 0.26.8
- build dependencies:
  - added a dependency 'app-alternatives/ninja'
  - added a dependency '>=dev-build/cmake-3.28.5'
- release notes: https://github.com/tree-sitter/tree-sitter/releases/tag/v0.26.8
dev-libs/xmlsec: [VMWARE]
- from 1.3.7-r1 to 1.3.10-r1
- EAPI changed from '8' to '9'
- added IUSE flag 'verify-sig'
- build dependencies:
  - added a dependency '>=app-portage/gemato-20' for USE 'verify-sig?'
  - added a dependency 'sec-keys/openpgp-keys-alekseysanin' for USE 'verify-sig?'
  - added a dependency 'app-alternatives/gpg' for USE 'verify-sig?' -> '||'
  - added a dependency 'app-crypt/gnupg[-alternatives(-)]' for USE 'verify-sig?' -> '||'
- dependencies and runtime dependencies:
  - changes for dev-libs/libltdl:
    - added version constraint >=1.0.0
    - added slot constraint =
  - changes for dev-libs/libxml2:
    - changed version constraint from >=2.7.4 to >=2.9.13
  - changes for dev-libs/libxslt:
    - changed version constraint from >=1.0.20 to >=1.1.35
    - added slot constraint =
  - changes for net-libs/gnutls with USE conditionals 'gnutls?':
    - changed version constraint from >=3.6.13 to >=3.8.3
  - changes for dev-libs/nspr with USE conditionals 'nss?':
    - changed version constraint from >=4.4.1 to >=4.34.1
    - added slot constraint =
  - changes for dev-libs/nss with USE conditionals 'nss?':
    - changed version constraint from >=3.9 to >=3.91
    - added slot constraint =
  - changes for dev-libs/openssl with USE conditionals 'openssl?':
    - added version constraint >=3.0.13
- release notes: https://github.com/lsh123/xmlsec/releases/tag/1.3.10 https://github.com/lsh123/xmlsec/releases/tag/1.3.9 https://github.com/lsh123/xmlsec/releases/tag/1.3.8
dev-python/chardet:
- from 5.2.0 to 6.0.0_p1
- build dependencies:
  - dropped a dependency '>=dev-python/setuptools-78.1.0[python_targets_pypy3_11(-)?,python_targets_python3_11(-)?,python_targets_python3_12(-)?,python_targets_python3_13(-)?,python_targets_python3_14(-)?]'
  - added a dependency 'dev-python/hatch-vcs[python_targets_pypy3_11(-)?,python_targets_python3_11(-)?,python_targets_python3_12(-)?,python_targets_python3_13(-)?,python_targets_python3_14(-)?]'
  - added a dependency '>=dev-python/hatchling-1.27.0[python_targets_pypy3_11(-)?,python_targets_python3_11(-)?,python_targets_python3_12(-)?,python_targets_python3_13(-)?,python_targets_python3_14(-)?]'
- release notes: https://github.com/chardet/chardet/releases/tag/6.0.0
dev-python/charset-normalizer: [SYSEXT-PYTHON]
- from 3.4.4 to 3.4.7
- added IUSE flag 'native-extensions'
  - disabled in Flatcar, otherwise pulls in a bunch of dependencies
- added IUSE flag 'debug'
- build dependencies:
  - added a dependency 'dev-python/mypy[python_targets_python3_11(-)?,python_targets_python3_12(-)?,python_targets_python3_13(-)?,python_targets_python3_14(-)?]' for USE 'native-extensions?' -> 'python_targets_python3_12?'
- dependencies:
  - added a dependency 'dev-lang/python:3.12' for USE 'python_targets_python3_12?'
- release notes: https://github.com/jawah/charset_normalizer/releases/tag/3.4.{7..5}
dev-python/cryptography:
- from 46.0.5 to 46.0.7
- release notes: https://github.com/pyca/cryptography/blob/46.0.7/CHANGELOG.rst
dev-python/cython:
- from 3.1.7 to 3.2.4
- release notes: https://github.com/cython/cython/releases/tag/3.2.4
dev-python/ensurepip-pip: [AZURE] [DEV] [GCE] [SYSEXT-PYTHON]
- from 25.3 to 26.0.1
- release notes: https://raw.githubusercontent.com/pypa/pip/refs/tags/26.0.1/NEWS.rst
dev-python/hatchling:
- from 1.27.0 to 1.29.0
- release notes: https://github.com/pypa/hatch/releases/tag/hatchling-v1.29.0
dev-python/idna: [SYSEXT-PYTHON]
- from 3.11 to 3.14
- added IUSE flag 'verify-provenance'
- build dependencies:
  - added a dependency 'dev-python/pypi-attestations' for USE 'verify-provenance?'
- release notes: https://github.com/kjd/idna/releases/tag/v3.14 https://github.com/kjd/idna/releases/tag/v3.13 https://github.com/kjd/idna/releases/tag/v3.12
dev-python/jaraco-context: [SYSEXT-PYTHON]
- from 6.1.0 to 6.1.2
- release notes: https://raw.githubusercontent.com/jaraco/jaraco.context/refs/tags/v6.1.2/NEWS.rst
dev-python/jaraco-text: [SYSEXT-PYTHON]
- from 4.0.0 to 4.2.0
- release notes: https://raw.githubusercontent.com/jaraco/jaraco.text/refs/tags/v4.2.0/NEWS.rst
dev-python/linkify-it-py: [SYSEXT-PYTHON]
- from 2.0.3 to 2.1.0
- added IUSE flag 'verify-provenance'
- build dependencies:
  - added a dependency 'dev-python/pypi-attestations' for USE 'verify-provenance?'
- release notes: https://github.com/tsutsu3/linkify-it-py/releases/tag/v2.1.0
dev-python/lxml:
- from 6.0.2 to 6.1.1
- release notes: https://lxml.de/6.1/changes-6.1.1.html
dev-python/more-itertools: [SYSEXT-PYTHON]
- from 10.8.0 to 11.0.2
- release notes: https://github.com/more-itertools/more-itertools/releases/tag/v11.0.2 https://github.com/more-itertools/more-itertools/releases/tag/v11.0.1 https://github.com/more-itertools/more-itertools/releases/tag/v11.0.0
dev-python/packaging: [SYSEXT-PYTHON]
- from 26.0 to 26.1
- release notes: https://github.com/pypa/packaging/releases/tag/26.1
dev-python/pip: [SYSEXT-PYTHON]
- from 25.3 to 26.0.1
- release notes: https://raw.githubusercontent.com/pypa/pip/refs/tags/26.0.1/NEWS.rst
dev-python/platformdirs: [SYSEXT-PYTHON]
- from 4.5.0 to 4.9.6
- added IUSE flag 'verify-provenance'
- build dependencies:
  - added a dependency 'dev-python/pypi-attestations' for USE 'verify-provenance?'
- release notes: https://github.com/tox-dev/platformdirs/releases/tag/4.9.6 https://github.com/tox-dev/platformdirs/releases/tag/4.9.0 https://github.com/tox-dev/platformdirs/releases/tag/4.8.0 https://github.com/tox-dev/platformdirs/releases/tag/4.7.0 https://github.com/tox-dev/platformdirs/releases/tag/4.6.0
dev-python/poetry-core:
- from 2.3.0 to 2.3.2
- release notes: https://github.com/python-poetry/poetry-core/releases/tag/2.3.2
dev-python/pycparser:
- from 2.23 to 3.0
- release notes: https://github.com/eliben/pycparser/releases/tag/release_v3.00
dev-python/requests: [SYSEXT-PYTHON]
- from 2.32.5 to 2.33.1
- added IUSE flag 'verify-provenance'
- build dependencies:
  - added a dependency 'dev-python/pypi-attestations' for USE 'verify-provenance?'
- release notes: https://github.com/psf/requests/releases/tag/v2.33.1 https://github.com/psf/requests/releases/tag/v2.33.0
dev-python/rich: [SYSEXT-PYTHON]
- from 14.2.0 to 15.0.0
- release notes: https://github.com/Textualize/rich/releases/tag/v15.0.0 https://github.com/Textualize/rich/releases/tag/v14.3.0
dev-python/setuptools: [SYSEXT-PYTHON]
- downgraded from 80.9.0-r1 to 79.0.1
- the downgrade here is because we masked setuptools 82
  - the mask is here because new setuptools broke virt-firmware, which is used for building qemu images
dev-python/setuptools-scm: [SYSEXT-PYTHON]
- from 9.2.2 to 10.0.5
- build dependencies:
  - changes for dev-python/setuptools:
    - added version constraint >=78.1.0
  - added a dependency '>=dev-python/vcs-versioning-1.0.0[python_targets_pypy3_11(-)?,python_targets_python3_13t(-)?,python_targets_python3_14t(-)?,python_targets_python3_15t(-)?,python_targets_python3_11(-)?,python_targets_python3_12(-)?,python_targets_python3_13(-)?,python_targets_python3_14(-)?,python_targets_python3_15(-)?]'
- runtime dependencies:
  - added a dependency '>=dev-python/vcs-versioning-1.0.0[python_targets_pypy3_11(-)?,python_targets_python3_13t(-)?,python_targets_python3_14t(-)?,python_targets_python3_15t(-)?,python_targets_python3_11(-)?,python_targets_python3_12(-)?,python_targets_python3_13(-)?,python_targets_python3_14(-)?,python_targets_python3_15(-)?]'
- release notes: https://github.com/pypa/setuptools-scm/releases/tag/setuptools-scm-v10.0.5 https://github.com/pypa/setuptools-scm/releases/tag/setuptools-scm-v10.0.0
dev-python/tomli:
- from 2.3.0 to 2.4.1
- release notes: https://raw.githubusercontent.com/hukkin/tomli/refs/tags/2.4.1/CHANGELOG.md
dev-python/uc-micro-py: [SYSEXT-PYTHON]
- from 1.0.3 to 2.0.0
- added IUSE flag 'verify-provenance'
- build dependencies:
  - added a dependency 'dev-python/pypi-attestations' for USE 'verify-provenance?'
- release notes: https://raw.githubusercontent.com/tsutsu3/uc.micro-py/refs/tags/v2.0.0/CHANGELOG.md
dev-python/urllib3: [AZURE] [DEV] [SYSEXT-PYTHON]
- from 2.6.3 to 2.7.0
- release notes: https://github.com/urllib3/urllib3/releases/tag/2.7.0
dev-python/wheel: [SYSEXT-PYTHON]
- from 0.46.2 to 0.47.0
- release notes: https://github.com/pypa/wheel/releases/tag/0.47.0
dev-util/bpftool: [PROD] [DEV]
- from 7.6.0 to 7.7.0-r1
- release notes: https://github.com/libbpf/bpftool/releases/tag/v7.7.0
dev-util/debugedit: [DEV]
- from 5.2-r1 to 5.3
- build dependencies:
  - changes for sec-keys/openpgp-keys-debugedit with USE conditionals 'verify-sig?':
    - added version constraint >=20260311
- release notes: https://sourceware.org/cgit/debugedit/log/?h=debugedit-5.3
dev-util/maturin:
- from 1.11.5 to 1.12.6
- build dependencies:
  - changes for dev-lang/rust with USE conditionals '||':
    - changed version constraint from >=1.85.0 to >=1.88.0
  - changes for dev-lang/rust-bin with USE conditionals '||':
    - changed version constraint from >=1.85.0 to >=1.88.0
- dependencies:
  - changes for dev-libs/openssl with USE conditionals 'ssl?':
    - added version constraint <4
- runtime dependencies:
  - changes for dev-libs/openssl with USE conditionals 'ssl?':
    - added version constraint <4
- licenses:
  - added license 'CDLA-Permissive-2.0'
- release notes: https://github.com/PyO3/maturin/releases/tag/v1.12.6
dev-vcs/git: [PROD] [DEV]
- from 2.52.0 to 2.53.0
- release notes: https://raw.githubusercontent.com/git/git/refs/tags/v2.53.0/Documentation/RelNotes/2.53.0.adoc
eclass/go-env.eclass:
- Create named go run wrapper rather than using -exec
- Add support for EAPI 9
- Enable CGO by default for EAPI 9
eclass/go-module.eclass:
- Add support for EAPI 9
- Bump minimal go version from 1.20 to 1.24.11
- Call go-env_set_compile_environment in src_configure for EAPI 9
eclass/llvm-r2.eclass:
- added from Gentoo
eclass/meson.eclass:
- fix boost detection w/ cross-compile
eclass/multiprocessing.eclass:
- add support for EAPI 9
eclass/rust.eclass:
- added rust 1.94.1
eclass/vala.eclass:
- added from Gentoo
licenses:
- dropped GPL-2+-with-eCos-exception-2, NVIDIA-2025, metapackage
- added CDLA-Permissive-2.0
media-libs/libpng:
- from 1.6.55 to 1.6.58
- release notes: https://www.libpng.org/pub/png/src/libpng-1.6.58-README.txt
net-analyzer/netperf: [DEV]
- still at 2.7.0_p20210121-r1
- package became stable on 'amd64' and 'arm64'
  - dropped accept keywords from overlay profiles
net-dialup/minicom: [DEV]
- from 2.10-r1 to 2.11.1
- release notes: https://salsa.debian.org/minicom-team/minicom/-/releases/2.11.1 https://salsa.debian.org/minicom-team/minicom/-/releases/2.11
net-dns/dnsmasq: [SYSEXT-INCUS]
- from 2.91 to 2.92_p2
- added IUSE flag 'verify-sig'
- build dependencies:
  - added a dependency '>=app-portage/gemato-20' for USE 'verify-sig?'
  - added a dependency 'sec-keys/openpgp-keys-simonkelley' for USE 'verify-sig?'
  - added a dependency 'app-alternatives/gpg' for USE 'verify-sig?' -> '||'
  - added a dependency 'app-crypt/gnupg[-alternatives(-)]' for USE 'verify-sig?' -> '||'
- release notes: https://dnsmasq.org/CHANGELOG
net-firewall/conntrack-tools: [PROD] [DEV]
- from 1.4.8-r1 to 1.4.9
- dependencies:
  - changes for net-libs/libnetfilter_conntrack:
    - changed version constraint from >=1.0.9 to >=1.1.1
- runtime dependencies:
  - changes for net-libs/libnetfilter_conntrack:
    - changed version constraint from >=1.0.9 to >=1.1.1
- release notes: https://www.mail-archive.com/netfilter-announce@lists.netfilter.org/msg00285.html
net-firewall/iptables: [PROD] [DEV]
- from 1.8.11-r1 to 1.8.13
- added IUSE flag 'verify-sig'
- release notes: https://www.mail-archive.com/netfilter-announce@lists.netfilter.org/msg00287.html https://www.mail-archive.com/netfilter-announce@lists.netfilter.org/msg00286.html
net-fs/cifs-utils: [PROD] [DEV]
- from 7.4 to 7.5
- release notes: https://git.samba.org/cifs-utils.git/?p=cifs-utils.git;a=log;h=25ba696a213f9a6d7b4fcdd157757695710c8886
net-libs/gnutls: [PROD] [DEV]
- from 3.8.12 to 3.8.13
- package became unstable on 'amd64' and 'arm64'
  - added accept keywords to overlay profiles
- added IUSE flag 'post-quantum'
  - enable post-quantum algos
- dependencies and runtime dependencies:
  - added a dependency '>=dev-libs/leancrypto-1.2.0:=[…]' for USE 'post-quantum?'
- release notes: https://gitlab.com/gnutls/gnutls/-/raw/3.8.13/NEWS
net-libs/libnetfilter_conntrack: [PROD] [DEV]
- from 1.1.0 to 1.1.1
- release notes: https://www.mail-archive.com/netfilter-announce@lists.netfilter.org/msg00284.html
net-libs/libnetfilter_queue: [PROD] [DEV]
- from 1.0.5 to 1.0.5-r1
- EAPI changed from '7' to '8'
- build dependencies:
  - changes for app-text/doxygen with USE conditionals 'doc?':
    - added dot use enabled requirement (must exist, no pretending if missing)
net-libs/ngtcp2: [PROD] [DEV]
- from 1.12.0 to 1.22.1
- package became unstable on 'amd64' and 'arm64'
  - added accept keywords to overlay profiles
- added IUSE flag 'verify-sig'
- IUSE flag 'gnutls' became disabled by default
- IUSE flag 'openssl' became enabled by default
- dependencies and runtime dependencies:
  - changes for dev-libs/openssl with USE conditionals 'ssl?' -> 'openssl?':
    - changed version constraint from >=1.1.1 to >=3.5
- release notes: https://github.com/ngtcp2/ngtcp2/releases/tag/v1.22.1
net-misc/curl: [PROD] [DEV]
- from 8.18.0 to 8.19.0
- fixes CVE-2026-1965, CVE-2026-3783, CVE-2026-3784, CVE-2026-3805
  - update: curl Flatcar#2050 (partially)
- mostly changes related to QUIC, which is disabled in Flatcar
- release notes: https://curl.se/ch/8.19.0.html
net-misc/iperf: [DEV]
- from 3.20 to 3.21
- the dropped dependencies are a bug in Gentoo, filed a PR
  - https://codeberg.org/gentoo/gentoo/pulls/1030
- dependencies:
  - dropped a dependency '>=dev-libs/cJSON-1.7.15'
  - dropped a dependency 'dev-libs/openssl:='
  - dropped a dependency 'net-misc/lksctp-tools' for USE 'sctp?'
  - added a dependency 'virtual/os-headers'
- release notes: https://github.com/esnet/iperf/releases/tag/3.21
net-misc/openssh: [PROD] [DEV]
- from 10.2_p1 to 10.3_p1
- fixes CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414
  - update: net-misc/openssh Flatcar#2069
- release notes: https://www.openssh.org/txt/release-10.3
net-misc/rsync: [PROD] [DEV]
- from 3.4.1-r2 to 3.4.3
- fixes CVE-2026-41035, CVE-2026-29518, CVE-2026-43617, CVE-2026-43618, CVE-2026-43619, CVE-2026-43620, CVE-2026-45232
  - update: rsync Flatcar#2087
- release notes: https://download.samba.org/pub/rsync/NEWS#3.4.3 https://download.samba.org/pub/rsync/NEWS#3.4.2
net-misc/whois: [PROD] [DEV]
- from 5.5.23 to 5.6.6
- removed IUSE flag 'xcrypt'
  - used to pick between libxcrypt or virtual libcrypt, now only virtual libcrypt is used
- build dependencies:
  - dropped a dependency 'app-arch/xz-utils'
- dependencies:
  - added a dependency 'virtual/libcrypt:='
  - dropped a dependency '>=sys-libs/libxcrypt-4.1:=' for USE 'xcrypt?'
  - dropped a dependency 'virtual/libcrypt:=' for USE '!xcrypt?'
- runtime dependencies:
  - added a dependency 'virtual/libcrypt:='
  - dropped a dependency '>=sys-libs/libxcrypt-4.1:=' for USE 'xcrypt?'
  - dropped a dependency 'virtual/libcrypt:=' for USE '!xcrypt?'
- release notes: https://github.com/rfc1036/whois/blob/v5.6.6/debian/changelog
profiles:
- added support for python 3.15, blacklisted in overlay profiles
- dev-libs/openssl 4 is masked
- sys-libs/ncurses >=6.6_p20260411 masked (tmux issues)
sec-policy/selinux-base: [PROD] [DEV]
- from 2.20250618-r1 to 2.20250618_p1
- EAPI changed from '7' to '8'
- added IUSE flag 'selinux_policy_types_strict'
  - this one is disabled
- added IUSE flag 'selinux_policy_types_mcs'
- added IUSE flag 'selinux_policy_types_mls'
- added IUSE flag 'selinux_policy_types_targeted'
- similar changes are made in other sec-policy packages, dropped from the report
sys-apps/bubblewrap:
- from 0.11.0 to 0.11.2-r1
- fixes CVE-2026-41163
  - update: bubblewrap Flatcar#2120
- runtime dependencies:
  - added a dependency 'sec-policy/selinux-bubblewrap' for USE 'selinux?'
- release notes: https://github.com/containers/bubblewrap/releases/tag/v0.11.2
sys-apps/checkpolicy: [PROD] [DEV]
- from 3.8.1 to 3.9
- dependencies:
  - changes for sys-libs/libsepol:
    - changed version constraint from >=3.8.1 to >=3.9
- runtime dependencies:
  - changes for sys-libs/libsepol:
    - changed version constraint from >=3.8.1 to >=3.9
- release notes: https://github.com/SELinuxProject/selinux/releases/tag/3.9
sys-apps/coreutils: [PROD] [DEV]
- from 9.9-r12 to 9.11
- release notes: https://lists.gnu.org/archive/html/coreutils-announce/2026-04/msg00000.html https://lists.gnu.org/archive/html/coreutils-announce/2026-02/msg00000.html
sys-apps/debianutils:
- from 5.14-r1 to 5.23.2
- release notes: https://salsa.debian.org/debian/debianutils/-/raw/debian/5.23.2/debian/changelog?ref_type=tags
sys-apps/ethtool: [PROD] [DEV]
- from 6.15 to 6.19
- release notes: https://git.kernel.org/pub/scm/network/ethtool/ethtool.git/plain/NEWS?h=v6.19
sys-apps/file: [DEV]
- from 5.46-r3 to 5.47-r3
- release notes: https://raw.githubusercontent.com/file/file/refs/tags/FILE5_47/ChangeLog
sys-apps/hwdata: [PROD] [DEV]
- from 0.400 to 0.401
- release notes: https://github.com/vcrhonek/hwdata/releases/tag/v0.401
sys-apps/iproute2: [PROD] [DEV]
- from 6.18.0 to 6.19.0
- release notes: https://www.spinics.net/lists/netdev/msg1158895.html
sys-apps/man-pages: [DEV]
- from 6.16-r2 to 6.17-r1
- release notes: https://lwn.net/ml/all/aYy41v6tYda2Qc_1@devuan/
sys-apps/pciutils: [PROD] [DEV]
- from 3.14.0 to 3.15.0
- release notes: https://git.kernel.org/pub/scm/utils/pciutils/pciutils.git/plain/ChangeLog?h=v3.15.0
sys-apps/portage: [DEV]
- from 3.0.77-r3 to 3.0.77-r4
- added patches:
  - Revert "depgraph: earlier slot operator backtracking"
    - caused unnecessary rebuilds
  - estrip: Don't break the debuglink CRC with the salted build
sys-apps/pv:
- from 1.10.3 to 1.10.4
- release notes: https://codeberg.org/ivarch/pv/releases/tag/v1.10.4
sys-apps/semodule-utils: [PROD] [DEV]
- from 3.8.1 to 3.9
- dependencies:
  - changes for sys-libs/libsepol:
    - changed version constraint from >=3.8.1 to >=3.9
- runtime dependencies:
  - changes for sys-libs/libsepol:
    - changed version constraint from >=3.8.1 to >=3.9
- release notes: https://github.com/SELinuxProject/selinux/releases/tag/3.9
sys-apps/shadow: [PROD] [DEV]
- from 4.19.3 to 4.19.4
- release notes: https://github.com/shadow-maint/shadow/releases/tag/4.19.4
sys-apps/systemd: [PROD] [DEV]
- from 259.4-r1 to 260.1-r1
- removed IUSE flag 'split-usr'
  - support for /usr mounting after switching root is removed
- removed IUSE flag 'cgroup-hybrid'
  - support for cgroupv1 is removed
- renamed IUSE flag 'http' to 'remote'
- some deps lost the MULTILIB_USEDEP requirement and slot constraints
  - since this was quite verbose I dropped them from the report
- regenerated the user patches
  - some patches could be dropped
- dependencies and runtime dependencies:
  - changes for sys-apps/util-linux:
    - changed version constraint from >=2.32 to >=2.37
  - changes for sys-kernel/linux-headers:
    - changed version constraint from >=4.15 to >=5.10
  - dropped a dependency 'sys-libs/libcap'
  - dropped a dependency 'virtual/libcrypt'
  - changes for sys-fs/cryptsetup with USE conditionals 'cryptsetup?':
    - changed version constraint from >=2.0.1 to >=2.4.0
  - changes for dev-libs/elfutils with USE conditionals 'elfutils?':
    - changed version constraint from >=0.158 to >=0.177
  - added a dependency '>=sys-libs/glibc-2.34' for USE 'elibc_glibc?'
  - added a dependency '>=sys-libs/libxcrypt-4.4.0' for USE 'elibc_glibc?'
  - changes for dev-libs/openssl with USE conditionals 'openssl?':
    - changed version constraint from >=1.1.0 to >=3.0.0
  - changes for sys-libs/libseccomp with USE conditionals 'seccomp?':
    - changed version constraint from >=2.3.3 to >=2.4.0
- release notes: https://github.com/systemd/systemd/releases/tag/v260
sys-apps/texinfo:
- from 7.2-r4 to 7.3
- release notes: https://lists.gnu.org/archive/html/info-gnu/2026-03/msg00000.html
sys-apps/util-linux: [PROD] [DEV]
- from 2.41.3-r1 to 2.41.4-r1
- fixes CVE-2026-27456
  - update: util-linux Flatcar#2073
- release notes: https://github.com/util-linux/util-linux/blob/v2.41.4/Documentation/releases/v2.41.4-ReleaseNotes
sys-auth/sssd: [PROD] [DEV]
- from 2.9.8 to 2.13.0
- fixes CVE-2026-6245
  - update: sssd Flatcar#2082
- removed IUSE flag 'acl'
  - support for access control lists is unconditional
- added IUSE flag 'filecaps'
  - use file capabilities instead of setuid for some helper binaries
- added IUSE flag 'openid'
  - support for login via OpenID Connect (like Keycloak), disabled in Flatcar
- build dependencies:
  - added a dependency 'acct-group/sssd'
  - added a dependency 'acct-user/sssd'
  - added a dependency 'sys-libs/libcap'
  - added a dependency 'virtual/pkgconfig'
- dependencies:
  - added a dependency 'net-fs/cifs-utils[acl]'
  - added a dependency 'sys-libs/libcap'
  - dropped a dependency 'net-fs/cifs-utils[acl]' for USE 'acl?'
  - added a dependency 'dev-libs/jose' for USE 'openid?'
  - added a dependency 'net-misc/curl' for USE 'openid?'
- install dependencies:
  - added a dependency 'sys-libs/libcap' for USE 'filecaps?'
- runtime dependencies:
  - added a dependency 'acct-group/sssd'
  - added a dependency 'acct-user/sssd'
  - added a dependency 'net-fs/cifs-utils[acl]'
  - added a dependency 'sys-libs/libcap'
  - dropped a dependency 'net-fs/cifs-utils[acl]' for USE 'acl?'
  - added a dependency 'virtual/tmpfiles'
  - added a dependency 'dev-libs/jose' for USE 'openid?'
  - added a dependency 'net-misc/curl' for USE 'openid?'
  - dropped a dependency 'sys-apps/pcsc-lite[policykit]' for USE 'passkey?'
- release notes: https://sssd.io/release-notes/sssd-2.13.0.html https://sssd.io/release-notes/sssd-2.12.0.html https://sssd.io/release-notes/sssd-2.11.0.html https://sssd.io/release-notes/sssd-2.10.0.html
sys-block/parted: [PROD] [DEV]
- from 3.6-r2 to 3.7
- EAPI changed from '7' to '8'
- added IUSE flag 'static-libs'
- build dependencies:
  - dropped a dependency '>=app-portage/elt-patches-20250306'
  - dropped a dependency '>=dev-build/libtool-2.4.7-r3'
  - dropped a dependency 'sys-devel/gnuconfig'
  - changes for sec-keys/openpgp-keys-bcl with USE conditionals 'verify-sig?':
    - changed version constraint from >=20230315 to >=20260418
  - dropped a dependency '>=dev-build/automake-1.18.1:1.18' for USE '||'
  - dropped a dependency '>=dev-build/autoconf-2.73:2.73' for USE '||'
  - dropped a dependency '>=dev-build/autoconf-2.72-r1:2.72' for USE '||'
- release notes: https://savannah.gnu.org/news/?id=10879
sys-devel/crossdev:
- from 20260318 to 20260326
- release notes: https://gitweb.gentoo.org/proj/crossdev.git/log/?h=20260326
sys-firmware/intel-microcode: [PROD] [DEV]
- from 20260227_p20260227 to 20260512_p20260513
- release notes: https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20260512
sys-fs/btrfs-progs: [PROD] [DEV]
- from 6.17.1 to 6.19.1
- release notes: https://github.com/kdave/btrfs-progs/releases/tag/v6.19.1 https://github.com/kdave/btrfs-progs/releases/tag/v6.19
sys-fs/cryptsetup: [PROD] [DEV]
- from 2.8.4 to 2.8.6-r1
- release notes: https://gitlab.com/cryptsetup/cryptsetup/-/raw/v2.8.6/docs/v2.8.6-ReleaseNotes
sys-fs/e2fsprogs: [PROD] [DEV]
- from 1.47.3-r1 to 1.47.4
- release notes: https://e2fsprogs.sourceforge.net/e2fsprogs-release.html#1.47.4
sys-fs/fuse: [SYSEXT-INCUS] [SYSEXT-PODMAN] [VMWARE]
- from 3.18.1 to 3.18.2
- release notes: https://github.com/libfuse/libfuse/releases/tag/fuse-3.18.2
sys-fs/lvm2: [PROD] [DEV]
- from 2.03.37 to 2.03.39
- added IUSE flag 'xfs'
  - support for xfs?, disabled
- added IUSE flag 'vdo'
  - support for virtual disk optimizer, disabled
- dependencies:
  - added a dependency '>=sys-block/vdo-8.3.2.1' for USE 'lvm?' -> 'vdo?'
  - added a dependency 'sys-fs/xfsprogs' for USE 'xfs?'
- runtime dependencies:
  - added a dependency '>=sys-block/vdo-8.3.2.1' for USE 'lvm?' -> 'vdo?'
- release notes: https://gitlab.com/lvmteam/lvm2/-/tags/v2_03_39 https://gitlab.com/lvmteam/lvm2/-/tags/v2_03_38
sys-fs/mdadm: [PROD] [DEV]
- from 4.5-r1 to 4.6-r1
- release notes: https://git.kernel.org/pub/scm/utils/mdadm/mdadm.git/tree/CHANGELOG.md?h=mdadm-4.6
sys-fs/squashfs-tools: [DEV] [SYSEXT-INCUS]
- from 4.7.4 to 4.7.5
- release notes: https://github.com/plougher/squashfs-tools/releases?q=4.7.5
sys-fs/xfsprogs: [PROD] [DEV]
- from 6.18.0 to 6.19.0
- release notes: https://web.git.kernel.org/pub/scm/fs/xfs/xfsprogs-dev.git/plain/doc/CHANGES?h=v6.19.0
sys-kernel/dracut: [PROD] [DEV]
- from 109-r2 to 110-r5
- package became stable on 'amd64' and 'arm64'
  - dropped accept keywords from overlay profiles
- release notes: https://github.com/dracut-ng/dracut/releases/tag/110
sys-libs/libcap: [PROD] [DEV]
- from 2.77 to 2.78
- fixes CVE-2026-4878
  - update: libcap Flatcar#2074
- release notes: https://sites.google.com/site/fullycapable/release-notes-for-libcap#h.x4zn8j3lss6r
sys-libs/libcap-ng: [PROD] [DEV]
- from 0.8.5 to 0.9.3
- added IUSE flag 'bpf'
  - build cap-audit tool, disabled
- added IUSE flag 'deprecated'
  - build deprecated captest, disabled
- build dependencies:
  - added a dependency 'llvm-core/clang[llvm_targets_BPF(-)]' for USE 'bpf?'
  - added a dependency 'virtual/pkgconfig' for USE 'bpf?'
- dependencies:
  - added a dependency 'dev-libs/libbpf:=' for USE 'bpf?'
  - added a dependency 'dev-util/bpftool' for USE 'bpf?'
  - added a dependency 'sys-process/audit' for USE 'bpf?'
- runtime dependencies:
  - added a dependency 'dev-libs/libbpf:=' for USE 'bpf?'
  - added a dependency 'sys-process/audit' for USE 'bpf?'
- release notes: https://github.com/stevegrubb/libcap-ng/releases/tag/v0.9.3 https://github.com/stevegrubb/libcap-ng/releases/tag/v0.9.2 https://github.com/stevegrubb/libcap-ng/releases/tag/v0.9.1 https://github.com/stevegrubb/libcap-ng/releases/tag/v0.9
sys-libs/libselinux: [PROD] [DEV]
- from 3.8.1-r3 to 3.9
- modified the ebuild in place to make python optional again
  - same change happened in Gentoo, but for 3.10-r1 ebuild
  - not reporting it to Gentoo, as 3.10-r1 became stable at the time of writing, so we will pick it up next time we do weekly updates
- package became stable on 'amd64' and 'arm64'
  - dropped accept keywords from overlay profiles
- dependencies and runtime dependencies:
  - changes for sys-libs/libsepol:
    - changed version constraint from >=3.8.1 to >=3.9
- release notes: https://github.com/SELinuxProject/selinux/releases/tag/3.9
sys-libs/libsepol: [PROD] [DEV]
- from 3.8.1 to 3.9
- release notes: https://github.com/SELinuxProject/selinux/releases/tag/3.9
sys-libs/ncurses: [PROD] [DEV]
- from 6.5_p20250802 to 6.5_p20251220
- release notes: https://invisible-island.net/ncurses/NEWS.html#t20251220
sys-libs/timezone-data: [PROD] [DEV]
- from 2025c to 2026a
- release notes: https://lists.iana.org/hyperkitty/list/tz-announce@iana.org/thread/ASPLBE3A4BAEXIOQ3KZ6EJSJWBU6L53G/
sys-libs/zlib: [PROD] [DEV]
- from 1.3.1-r1 to 1.3.2-r1
- fixes CVE-2026-27171
  - update: zlib Flatcar#2062
- release notes: https://github.com/madler/zlib/releases?q=1.3.2
sys-process/audit: [PROD] [DEV]
- from 4.0.2-r1 to 4.1.4-r1
- runtime dependencies:
  - added a dependency 'virtual/tmpfiles'
- release notes: https://github.com/linux-audit/audit-userspace/releases/tag/v4.1.{4..0}
sys-process/lsof: [PROD] [DEV]
- from 4.99.5 to 4.99.6
- release notes: https://github.com/lsof-org/lsof/releases/tag/4.99.6
sys-process/procps: [PROD] [DEV]
- from 4.0.5-r4 to 4.0.6
- added IUSE flag 'verify-sig'
- release notes: https://gitlab.com/procps-ng/procps/-/releases/v4.0.6
x11-drivers/nvidia-drivers: [SYSEXT-NVIDIA-DRIVERS-535] [SYSEXT-NVIDIA-DRIVERS-535-OPEN]
- from 535.288.01 to 535.309.01
- fixes CVE-2025-33221, CVE-2026-24182, CVE-2026-24187, CVE-2026-24190, CVE-2026-24192, CVE-2026-24193, CVE-2026-24194, CVE-2026-24195, CVE-2026-24196, CVE-2026-24197, CVE-2026-24198, CVE-2026-24199
  - update: nvidia-drivers Flatcar#2155 (partially - not sure about other versions we distribute)
- runtime dependencies:
  - dropped a dependency 'dev-libs/openssl:0/3'
  - added a dependency 'dev-libs/openssl:0/3' for USE '||'
  - added a dependency 'dev-libs/openssl-compat:3' for USE '||'
- release notes: https://docs.nvidia.com/datacenter/tesla/tesla-release-notes-535-309-01/index.html

--

changelog
image diff

It's from Gentoo commit 0143d1ed33da40d02da6213c747a5caf499de0ff. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit b5983aabb9f9930c691b9014cb2439955d5a7399. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit b215067bb84153de845c8e40fb63332a8cedb593. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit 286217ddee59989cd4d279d753e5f90ca39392f1. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit f69315d32517556e31ebe25ecbc95d14b3aa8e29. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit ceced879b53b13a244229d52e26606807d6f9dcc. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit a8207613da7e10b87680aed6ecb6f67653056f07. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit 2ee880d675e524d6640b7fa981567790562d0afd. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit 49aad06a0c5a0b6a515c3f4677027a45cb024ec4. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit 562c8786fc9e543a76b8ef6e5e5d88fedf4f5c4f. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit c2020042ecb306e9df53601301dd7f3c97ca7746. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit f0186eec5a0adae0f39ba1dc79f8d246f5f63545. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit 74bd346b813a45660028775114296e407bb2e847. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit 593a7c49a73d19e47532970c7b66c1f69421b616. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit a27bef5d014c4960dbeea9a6826c4ffef0fa17a9. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit 625ce2bccb55494d9a3a8ad40aa2610473ea6f72. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit 860b5bc43838650858ae3d51dbaa9254001a2b1a. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit bcf67f74b94f6879536db1be9f23194d1f2f93c2. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit 3453d2273c0d1f21aca38eeafe9e03bc84fa290c. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit ae7a39a648d705856ffc14974620e0c681092b53. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit fe8bb4f6c55f60d4fb18593a40ddcddfd5244358. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit 11c4b2d1dc7b83be8626156c47daa18deaf72590. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit 1e65d927458ec6744d829f20be1fad2195d9873a. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit c553d781f14695c2361ef5a47f7f135ab5ce1114. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

krnowak · 2026-06-10T15:18:35Z

CI passed. (arm64 failed - it is only tested on hetzner, which seems to have capacity problems)

tormath1 · 2026-06-10T15:52:52Z

CI passed. (arm64 failed - it is only tested on hetzner, which seems to have capacity problems)

You can give a try to Azure - it should work. :)

krnowak · 2026-06-11T09:00:21Z

CI passed. (arm64 failed - it is only tested on hetzner, which seems to have capacity problems)

You can give a try to Azure - it should work. :)

Sure, let's see - https://jenkins.flatcar.org/job/container/job/test/741/

krnowak · 2026-06-11T09:03:47Z

I also kicked off azure for amd64, just in case - https://jenkins.flatcar.org/job/container/job/test/742/

krnowak · 2026-06-11T09:39:58Z

Both passed.

tormath1

Thanks a lot, this is a major one. Let's merge this and see how nightlies react.

dongsupark

Thanks a lot for the huge effort.
Nitpicks below:

dongsupark · 2026-06-11T14:26:22Z

+- dev: mpc ([1.4.1](https://gitlab.inria.fr/mpc/mpc/-/raw/1.4.1/NEWS) (includes [1.4.0](https://gitlab.inria.fr/mpc/mpc/-/raw/1.4.0/NEWS)))
+- sysext-containerd: containerd ([2.2.2](https://github.com/containerd/containerd/releases/tag/v2.2.2))
+- sysext-incus, sysext-podman, vmware: fuse ([3.18.2](https://github.com/libfuse/libfuse/releases/tag/fuse-3.18.2))
+- sysext-incus: dnsmasq ([2.92_p2](https://dnsmasq.org/CHANGELOG))


- dev, sysext-incus: dnsmasq, because sdk-depends pulls in dnsmasq as well.

So this should be more like - SDK, sysext-incus: dnsmasq then. dev is for developer container. But usually I don't list SDK packages unless they are quite important (like dev-lang/go), and I'd say that dnsmasq is not an important package in SDK.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>

…pt/adcli Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>

Borrowed from Gentoo's ebuild for libselinux-3.10-r1, which we will pick up next time. Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>

The newly introduced EAPI 9 mandates that some ebuild variables should not be exported anymore. This breaks cross-compilation as some tools rely on variables like ESYSROOT (like cross-pkg-config from crossdev). Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>

Also redo the patches in git and stabilize the package. Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>

github-actions Bot added the main label May 25, 2026

krnowak mentioned this pull request Jun 2, 2026

Weekly portage-stable package updates 2026-06-01 #4054

Closed

2 tasks

krnowak force-pushed the buildbot/weekly-portage-stable-package-updates-2026-05-25 branch from e3fba87 to 13a7f6d Compare June 5, 2026 17:08

krnowak had a problem deploying to development June 5, 2026 17:08 — with GitHub Actions Error

dongsupark added this to Flatcar tactical, release planning, and roadmap Jun 8, 2026

dongsupark moved this to ⚒️ In Progress in Flatcar tactical, release planning, and roadmap Jun 8, 2026

Flatcar Buildbot added 24 commits June 10, 2026 12:06

dev-libs/tree-sitter: Sync with Gentoo

d6248e1

It's from Gentoo commit 0143d1ed33da40d02da6213c747a5caf499de0ff. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

dev-libs/xmlsec: Sync with Gentoo

17d9b85

It's from Gentoo commit b5983aabb9f9930c691b9014cb2439955d5a7399. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

dev-python/cachecontrol: Sync with Gentoo

15a5987

It's from Gentoo commit b215067bb84153de845c8e40fb63332a8cedb593. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

dev-python/certifi: Sync with Gentoo

e0ae280

It's from Gentoo commit 286217ddee59989cd4d279d753e5f90ca39392f1. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

dev-python/cffi: Sync with Gentoo

7f00104

It's from Gentoo commit f69315d32517556e31ebe25ecbc95d14b3aa8e29. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

dev-python/chardet: Sync with Gentoo

d4c3a56

It's from Gentoo commit ceced879b53b13a244229d52e26606807d6f9dcc. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

dev-python/charset-normalizer: Sync with Gentoo

7b35811

It's from Gentoo commit a8207613da7e10b87680aed6ecb6f67653056f07. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

dev-python/cryptography: Sync with Gentoo

88d9102

It's from Gentoo commit 2ee880d675e524d6640b7fa981567790562d0afd. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

dev-python/cython: Sync with Gentoo

ea7c5fd

It's from Gentoo commit 49aad06a0c5a0b6a515c3f4677027a45cb024ec4. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

dev-python/dependency-groups: Sync with Gentoo

0d93439

It's from Gentoo commit 562c8786fc9e543a76b8ef6e5e5d88fedf4f5c4f. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

dev-python/distlib: Sync with Gentoo

f1d8033

It's from Gentoo commit c2020042ecb306e9df53601301dd7f3c97ca7746. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

dev-python/docutils: Sync with Gentoo

eff8448

It's from Gentoo commit f0186eec5a0adae0f39ba1dc79f8d246f5f63545. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

dev-python/editables: Sync with Gentoo

feb5b4c

It's from Gentoo commit 74bd346b813a45660028775114296e407bb2e847. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

dev-python/ensurepip-pip: Sync with Gentoo

d5ad990

It's from Gentoo commit 593a7c49a73d19e47532970c7b66c1f69421b616. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

dev-python/ensurepip-setuptools: Sync with Gentoo

2d47743

It's from Gentoo commit a27bef5d014c4960dbeea9a6826c4ffef0fa17a9. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

dev-python/fastjsonschema: Sync with Gentoo

cc7d677

It's from Gentoo commit 625ce2bccb55494d9a3a8ad40aa2610473ea6f72. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

dev-python/flit-core: Sync with Gentoo

e009b2b

It's from Gentoo commit 860b5bc43838650858ae3d51dbaa9254001a2b1a. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

dev-python/gpep517: Sync with Gentoo

e4ecf4f

It's from Gentoo commit bcf67f74b94f6879536db1be9f23194d1f2f93c2. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

dev-python/hatch-vcs: Sync with Gentoo

dbeb730

It's from Gentoo commit 3453d2273c0d1f21aca38eeafe9e03bc84fa290c. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

dev-python/hatchling: Sync with Gentoo

3d3693c

It's from Gentoo commit ae7a39a648d705856ffc14974620e0c681092b53. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

dev-python/idna: Sync with Gentoo

af6672f

It's from Gentoo commit fe8bb4f6c55f60d4fb18593a40ddcddfd5244358. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

dev-python/installer: Sync with Gentoo

510edd8

It's from Gentoo commit 11c4b2d1dc7b83be8626156c47daa18deaf72590. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

dev-python/jaraco-collections: Sync with Gentoo

5fdc9bc

It's from Gentoo commit 1e65d927458ec6744d829f20be1fad2195d9873a. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

dev-python/jaraco-context: Sync with Gentoo

996e6ea

It's from Gentoo commit c553d781f14695c2361ef5a47f7f135ab5ce1114. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

krnowak moved this from ⚒️ In Progress to ✅ Testing / in Review in Flatcar tactical, release planning, and roadmap Jun 10, 2026

krnowak had a problem deploying to development June 10, 2026 15:17 — with GitHub Actions Error

krnowak marked this pull request as ready for review June 10, 2026 15:18

krnowak requested a review from a team as a code owner June 10, 2026 15:18

krnowak mentioned this pull request Jun 11, 2026

Weekly portage-stable package updates 2026-06-08 #4076

Closed

2 tasks

tormath1 approved these changes Jun 11, 2026

View reviewed changes

dongsupark approved these changes Jun 11, 2026

View reviewed changes

krnowak added 13 commits June 11, 2026 17:04

overlay sys-kernel/bootengine: Drop workarounds for dracut <110

5128c43

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>

overlay coreos/user-patches: Drop user-patches for dev-libs/libxml2

60c7986

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>

build_packages: Break some more another dep loops

f199ba8

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>

sys-apps/systemd: Experiment with libarchive dependency

fcf8a4f

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>

overlay coreos/config: Add a cross-compilation workaround for app-cry…

1b3ed66

…pt/adcli Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>

overlay x11-drivers/old-nvidia-drivers: Add 570.211.01 back

63aa6e9

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>

overlay x11-drivers/nvidia-drivers-service: Bump 535 version

6a02605

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>

sys-libs/libselinux: Make python optional again

800e22a

Borrowed from Gentoo's ebuild for libselinux-3.10-r1, which we will pick up next time. Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>

overlay profiles: Mask dev-python/setuptools-82

43b5ea1

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>

overlay app-crypt/clevis: Add a fix for dracut 110

0a30cb9

Also redo the patches in git and stabilize the package. Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>

overlay profiles: Drop accept keywords for app-crypt/clevis

f15e6cf

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>

changelog: Add entries

74fd424

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>

krnowak force-pushed the buildbot/weekly-portage-stable-package-updates-2026-05-25 branch from da441d7 to 74fd424 Compare June 11, 2026 15:05

krnowak requested a deployment to development June 11, 2026 15:05 — with GitHub Actions Waiting

krnowak merged commit 13f5ac4 into main Jun 11, 2026
1 of 5 checks passed

krnowak deleted the buildbot/weekly-portage-stable-package-updates-2026-05-25 branch June 11, 2026 15:13

github-project-automation Bot moved this from ✅ Testing / in Review to Implemented in Flatcar tactical, release planning, and roadmap Jun 11, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Weekly portage-stable package updates 2026-05-25#4047

Weekly portage-stable package updates 2026-05-25#4047
krnowak merged 331 commits into
mainfrom
buildbot/weekly-portage-stable-package-updates-2026-05-25

github-actions Bot commented May 25, 2026 •

edited by krnowak

Loading

Uh oh!

krnowak commented Jun 10, 2026

Uh oh!

tormath1 commented Jun 10, 2026

Uh oh!

krnowak commented Jun 11, 2026

Uh oh!

krnowak commented Jun 11, 2026

Uh oh!

krnowak commented Jun 11, 2026

Uh oh!

tormath1 left a comment

Uh oh!

dongsupark left a comment

Uh oh!

dongsupark Jun 11, 2026

Uh oh!

krnowak Jun 11, 2026

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Conversation

github-actions Bot commented May 25, 2026 • edited by krnowak Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

krnowak commented Jun 10, 2026

Uh oh!

tormath1 commented Jun 10, 2026

Uh oh!

krnowak commented Jun 11, 2026

Uh oh!

krnowak commented Jun 11, 2026

Uh oh!

krnowak commented Jun 11, 2026

Uh oh!

tormath1 left a comment

Choose a reason for hiding this comment

Uh oh!

dongsupark left a comment

Choose a reason for hiding this comment

Uh oh!

dongsupark Jun 11, 2026

Choose a reason for hiding this comment

Uh oh!

krnowak Jun 11, 2026

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

github-actions Bot commented May 25, 2026 •

edited by krnowak

Loading