Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Build System Maintenance #9669

Open
tobtoht opened this issue Jan 2, 2025 · 0 comments
Open

Build System Maintenance #9669

tobtoht opened this issue Jan 2, 2025 · 0 comments

Comments

@tobtoht
Copy link
Collaborator

tobtoht commented Jan 2, 2025

Guix

Goal PRs
Reduce attack surface #9654, #9670, #9675, #9647
Upgrade packages #9467

See also: #9684.

Depends

Package Version Latest System CVEs Split [0] Velocity [1] PR
android-ndk 18b 27c - No - #9456
boost 1.84.0 1.87.0 b2 No Yes
cctools ? ? auto ? - #9455
darwin_sdk 12.2 ? - ? -
eudev 3.2.14 - auto No No 102 #9675
expat 2.6.0 2.6.4 auto Yes No 3996 #9681
freebsd_base 12.3 13.4 [2] - ? - #9667
hidapi 0.14.0 - cmake No No 874
libsodium 1.0.18 1.0.20 auto No Yes 5243
libtapi ? ? ? ? - #9455
libusb 1.0.27 - auto No No 2067
ncurses 6.1 6.5 auto Yes No [4]
openssl 3.0.13 3.0.15 [3] perl Yes Maybe? 110k #9661, #9672
protobuf 21.12 29.3 auto No No 611k #9478
readline 8.0 8.2p13 auto No No 114 [4]
unbound 1.22.0 - auto No Maybe? 59.7k
zeromq 4.3.5 - auto No No 300

[0] Package introduces chain split risk
[1] Lines changed in the last year
[2] Latest version we can update to (#9446).
[3] Latest stable release
[4] I plan to PR a patch that replaces ncurses and readline with linenoise.

Submodules

Submodule Version Latest PR
gtest 1.15.2 -
miniupnp 2.2.1 2.2.8 #9273, #9367
rapidjson Jul 3 2018 ?
randomx 1.2.1 -
supercop Aug 26 2020 ?

CMake

TBD

Documentation

TBD


Most of these PRs are ready, but will remain drafted until their dependencies are merged. For progress see #9631.

Last updated: Jan 24, 2025

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant