Weekly portage-stable package updates 2026-08-24 by github-actions[bot] · Pull Request #4238 · flatcar/scripts

github-actions · 2026-08-24T07:36:12Z

CI: https://jenkins.flatcar.org/job/container/job/sdk/181/cldsv/

Closes flatcar/Flatcar#2223
Closes flatcar/Flatcar#2249
Closes flatcar/Flatcar#2325
Closes flatcar/Flatcar#2326
Closes flatcar/Flatcar#2328
Closes flatcar/Flatcar#2329
Closes flatcar/Flatcar#2330
Closes flatcar/Flatcar#2331
Closes flatcar/Flatcar#2348
Closes flatcar/Flatcar#2349
Closes flatcar/Flatcar#2350
Closes flatcar/Flatcar#2351

--

app-arch/tar: [PROD] [DEV]
- still at 1.35-r1
- package became stable on 'amd64'
- package became stable on 'arm64'
app-arch/unzip: [PROD] [DEV]
- from 6.0_p29-r2 to 6.0_p31
- package became unstable on 'amd64'
- package became unstable on 'arm64'
- fixes CAN-2026-2034440, CAN-2026-2034442, CAN-2026-2034443
  - update: app-arch/unzip Flatcar#2351
- release notes: https://metadata.ftp-master.debian.org/changelogs//main/u/unzip/unzip_6.0-31_changelog
app-arch/zip: [PROD] [DEV]
- from 3.0-r7 to 3.0_p16
- fixes zip-20260814
  - update: app-arch/zip Flatcar#2350
- package became unstable on 'amd64'
- package became unstable on 'arm64'
- release notes: https://metadata.ftp-master.debian.org/changelogs//main/z/zip/zip_3.0-16_changelog
app-containers/containerd: [SYSEXT-CONTAINERD]
- from 2.3.3 to 2.3.4
- release notes: https://github.com/containerd/containerd/releases/tag/v2.3.4
app-containers/crun: [SYSEXT-PODMAN]
- still at 1.28
- package became stable on 'amd64'
- package became stable on 'arm64'
app-containers/docker: [SYSEXT-DOCKER]
- still at 29.5.2
- package became stable on 'amd64'
- package became stable on 'arm64'
app-containers/docker-buildx: [SYSEXT-DOCKER]
- still at 0.35.0
- package became stable on 'amd64'
- package became stable on 'arm64'
app-containers/docker-cli: [SYSEXT-DOCKER]
- still at 29.5.2
- package became stable on 'amd64'
- package became stable on 'arm64'
app-containers/incus: [SYSEXT-INCUS]
- from 7.2 to 7.3-r1
- fixes CVE-2026-62867, CVE-2026-62940, CVE-2026-62941, CVE-2026-63125, CVE-2026-63343, GHSA-26gp-p5fw-3r2h, GHSA-67qw-68v3-36h6, GHSA-7fj9-65v4-rp7h, GHSA-p2v3-6wvc-cv3p, GHSA-4qxq-p5hm-3q3p, GHSA-m3j6-p3v3-qmjv, CVE-2026-62313, GHSA-6v6x-387m-rj4w
  - update: app-containers/incus Flatcar#2325
- build dependencies:
  - changes for dev-lang/go:
    - changed version constraint from >=1.25.10 to >=1.25.12
- release notes: https://discuss.linuxcontainers.org/t/incus-7-3-has-been-released/27033
app-containers/runc: [SYSEXT-CONTAINERD]
- still at 1.4.3
- package became stable on 'amd64'
- package became stable on 'arm64'
app-crypt/gnupg: [PROD] [DEV]
- from 2.5.20-r1 to 2.5.21
- release notes: https://dev.gnupg.org/T8262.html
app-crypt/gpgme: [SYSEXT-PODMAN]
- from 2.0.1-r1 to 2.1.2
- release notes: https://raw.githubusercontent.com/gpg/gpgme/refs/tags/gpgme-2.1.2/NEWS
app-emulation/qemu:
- still at 10.2.3
- package became stable on 'amd64'
- package became stable on 'arm64'
app-portage/gentoolkit: [DEV]
- from 0.7.6 to 0.8.0
- release notes: https://gitweb.gentoo.org/proj/gentoolkit.git/log/?h=gentoolkit-0.8.0
app-shells/bash: [PROD] [DEV]
- from 5.3_p9-r2 to 5.3_p15
- release notes: https://cgit.git.savannah.gnu.org/cgit/bash.git/log/?id=b460816602167718f78a6233164e8875f49b75b2
app-shells/bash-completion: [DEV]
- from 2.17.0 to 2.18.0
- release notes: https://github.com/scop/bash-completion/releases/tag/2.18.0
app-text/scdoc:
- from 1.11.4 to 1.11.5
- release notes: https://git.sr.ht/~sircmpwn/scdoc/refs/1.11.5
dev-build/meson:
- from 1.11.1 to 1.11.2
- release notes: https://github.com/mesonbuild/meson/commits/1.11.2/
dev-db/sqlite: [PROD] [DEV]
- from 3.53.1 to 3.53.3
- release notes: https://sqlite.org/releaselog/3_53_3.html
dev-lang/go:
- from 1.26.5 to 1.26.7
- fixes CVE-2026-33818, CVE-2026-39821, CVE-2026-46600, CVE-2026-56853, CVE-2026-56858, CVE-2026-56859, CVE-2026-56860, CVE-2026-56862, CVE-2026-56864, CVE-2026-56865
  - update: dev-lang/go Flatcar#2348
- release notes: https://go.dev/doc/devel/release#go1.26.7 https://go.dev/doc/devel/release#go1.26.6
dev-lang/rust:
- from 1.95.0 to 1.96.1
- IUSE flag 'doc' became disabled by default
- build dependencies:
  - added a dependency 'dev-lang/rust:1.96.1' for USE '||'
  - added a dependency 'dev-lang/rust-bin:1.96.1' for USE '||'
- release notes: https://blog.rust-lang.org/2026/06/30/Rust-1.96.1/ https://blog.rust-lang.org/2026/05/28/Rust-1.96.0/
dev-libs/expat: [PROD] [DEV]
- from 2.8.2 to 2.8.3
- fixes CVE-2026-72522
  - update: dev-libs/expat Flatcar#2328
- release notes: https://blog.hartwork.org/posts/expat-2-8-3-released/
dev-libs/glib: [PROD] [DEV]
- from 2.88.2 to 2.88.3
- fixes CVE-2026-15588
  - update: dev-libs/glib Flatcar#2326
- package became unstable on 'amd64'
- package became unstable on 'arm64'
- dependencies:
  - changes for dev-util/gdbus-codegen weak blocker:
    - changed version constraint from <2.88.2 to <2.88.3
- runtime dependencies:
  - changes for dev-util/gdbus-codegen weak blocker:
    - changed version constraint from <2.88.2 to <2.88.3
- release notes: https://gitlab.gnome.org/GNOME/glib/-/releases/2.88.3
dev-libs/leancrypto: [PROD] [DEV]
- from 1.7.2-r3 to 1.8.0
- release notes: https://leancrypto.org/leancrypto/releases/leancrypto-1.8.0/index.html
dev-libs/libevent: [PROD] [DEV]
- from 2.1.12-r1 to 2.1.13
- build dependencies:
  - changes for sec-keys/openpgp-keys-libevent with USE conditionals 'verify-sig?':
    - added version constraint >=1
- runtime dependencies:
  - dropped a weak blocker '!<=dev-libs/9libs-1.0'
- release notes: https://github.com/libevent/libevent/releases/tag/release-2.1.13-stable
dev-libs/openssl: [PROD] [DEV]
- from 3.5.7 to 3.6.4
- fixes CVE-2026-14456, CVE-2026-14457, CVE-2026-18798, CVE-2026-54874, CVE-2026-63072, CVE-2026-63073, CVE-2026-63074, CVE-2026-63075, CVE-2026-63076, CVE-2026-75803
  - update: dev-libs/openssl Flatcar#2349
- package became unstable on 'amd64'
- package became unstable on 'arm64'
- build dependencies:
  - changes for sec-keys/openpgp-keys-openssl with USE conditionals 'verify-sig?':
    - changed version constraint from >=20260415 to >=20260617-r1
- release notes: https://github.com/openssl/openssl/blob/openssl-3.6.4/CHANGES.md
dev-libs/tree-sitter:
- from 0.26.8 to 0.26.11
- release notes: https://github.com/tree-sitter/tree-sitter/releases/tag/v0.26.11
dev-python/charset-normalizer: [SYSEXT-PYTHON]
- from 3.4.7 to 3.4.9
- IUSE flag 'native-extensions' became disabled by default
- release notes: https://github.com/jawah/charset_normalizer/releases/tag/3.4.9
dev-python/cython:
- from 3.2.8 to 3.2.9
- release notes: https://github.com/cython/cython/releases/tag/3.2.9
dev-python/gpep517:
- from 19 to 20
- release notes: https://github.com/gentoo/gpep517/commits/v20/
dev-python/hatchling:
- from 1.30.1 to 1.31.0
- release notes: https://github.com/pypa/hatch/releases/tag/hatchling-v1.31.0
dev-python/jaraco-functools: [SYSEXT-PYTHON]
- from 4.5.0 to 4.6.0
- release notes: https://raw.githubusercontent.com/jaraco/jaraco.functools/refs/tags/v4.6.0/NEWS.rst
dev-python/jaraco-text: [SYSEXT-PYTHON]
- from 4.2.0 to 4.3.0
- release notes: https://raw.githubusercontent.com/jaraco/jaraco.text/refs/tags/v4.3.0/NEWS.rst
dev-python/platformdirs: [SYSEXT-PYTHON]
- from 4.10.0 to 4.10.1
- release notes: https://github.com/tox-dev/platformdirs/releases/tag/4.10.1
dev-python/setuptools: [SYSEXT-PYTHON]
- from 82.0.1 to 83.0.0
- release notes: https://raw.githubusercontent.com/pypa/setuptools/refs/tags/v83.0.0/NEWS.rst
dev-python/snakeoil:
- from 0.11.1 to 0.11.4
- release notes: https://github.com/pkgcore/snakeoil/releases/tag/v0.11.4
dev-python/tree-sitter:
- from 0.25.2-r1 to 0.26.0
- dependencies:
  - changes for dev-libs/tree-sitter:
    - changed version constraint from >=0.25 to =0.26*
    - added slot constraint =
  - dropped a dependency '<dev-libs/tree-sitter-0.27:='
- runtime dependencies:
  - changes for dev-libs/tree-sitter:
    - changed version constraint from >=0.25 to =0.26*
    - added slot constraint =
  - dropped a dependency '<dev-libs/tree-sitter-0.27:='
  - added a dependency 'dev-python/setuptools[python_targets_python3_12(-)?,python_targets_python3_13(-)?,python_targets_python3_14(-)?,python_targets_python3_15(-)?]'
  - dropped a dependency 'dev-python/setuptools[python_targets_python3_12(-)?,python_targets_python3_13(-)?]' for USE 'python_targets_python3_12?'
- release notes: https://github.com/tree-sitter/py-tree-sitter/releases/tag/v0.26.0
dev-util/pahole: [DEV]
- from 1.30 to 1.31
- release notes: https://git.kernel.org/pub/scm/devel/pahole/pahole.git/tag/?h=v1.31
dev-util/perf:
- still at 6.19.12
- dependencies:
  - changes for dev-libs/capstone with USE conditionals 'capstone?':
    - added version constraint <6
- runtime dependencies:
  - changes for dev-libs/capstone with USE conditionals 'capstone?':
    - added version constraint <6
dev-util/pkgcheck:
- from 0.10.40-r1 to 0.10.42
- build dependencies:
  - changes for dev-python/snakeoil:
    - changed version constraint from >=0.11.1 to >=0.11.3
  - changes for sys-apps/pkgcore:
    - changed version constraint from >=0.12.34 to >=0.12.37
- runtime dependencies:
  - changes for dev-python/snakeoil:
    - changed version constraint from >=0.11.1 to >=0.11.3
  - changes for sys-apps/pkgcore:
    - changed version constraint from >=0.12.34 to >=0.12.37
- release notes: https://github.com/pkgcore/pkgcheck/releases/tag/v0.10.42 https://github.com/pkgcore/pkgcheck/releases/tag/v0.10.41
licenses:
- added Boost-1.0, Unicode-DFS-2016, Unlicense
net-dns/bind: [PROD] [DEV]
- from 9.20.23 to 9.20.26
- package became stable on 'arm64'
- build dependencies:
  - dropped a dependency '>=app-portage/elt-patches-20250306'
  - dropped a dependency '>=dev-build/libtool-2.4.7-r3'
  - dropped a dependency 'sys-devel/gnuconfig'
  - dropped a dependency '>=dev-build/automake-1.18.1:1.18' for USE '||'
  - dropped a dependency '>=dev-build/autoconf-2.73:2.73' for USE '||'
  - dropped a dependency '>=dev-build/autoconf-2.72-r1:2.72' for USE '||'
- release notes: https://bind9.readthedocs.io/en/v9.20.26/notes.html#notes-for-bind-9-20-26 https://bind9.readthedocs.io/en/v9.20.25/notes.html#notes-for-bind-9-20-25 https://bind9.readthedocs.io/en/v9.20.24/notes.html#notes-for-bind-9-20-24
net-misc/openssh: [PROD] [DEV]
- from 10.4_p1-r1 to 10.5_p1
- fixes CVE-2026-73281, CVE-2026-73282, CVE-2026-73283
  - update: net-misc/openssh Flatcar#2329
- release notes: https://www.openssh.org/txt/release-10.5
net-misc/rsync: [PROD] [DEV]
- from 3.4.4 to 3.5.0\
- fixes CVE-2026-53783, CVE-2026-53784, CVE-2026-53785, CVE-2026-53786, CVE-2026-53788, CVE-2026-53789, CVE-2026-53790, CVE-2026-53791, CVE-2026-53792, CVE-2026-53793, CVE-2026-53794, CVE-2026-53795, CVE-2026-53796, CVE-2026-53797, CVE-2026-53798, CVE-2026-53799, CVE-2026-53800, CVE-2026-53801, CVE-2026-53802, CVE-2026-53803, CVE-2026-70452, CVE-2026-70453, CVE-2026-70454, CVE-2026-70455, CVE-2026-70456, CVE-2026-70457, CVE-2026-70458, CVE-2026-70459, CVE-2026-70460, CVE-2026-70461, CVE-2026-70462, CVE-2026-70463, CVE-2026-70464
  - update: net-misc/rsync Flatcar#2330
- package became unstable on 'amd64'
- package became unstable on 'arm64'
- dependencies:
  - changes for virtual/acl with USE conditionals 'acl?':
    - added version constraint >=2.4.0
- runtime dependencies:
  - changes for virtual/acl with USE conditionals 'acl?':
    - added version constraint >=2.4.0
- release notes: https://download.samba.org/pub/rsync/NEWS#3.5.0
net-nds/rpcbind: [PROD] [DEV]
- still at 1.2.8
- fixes CVE-2026-16277, CVE-2026-16461 through backported patches
  - update: net-nds/rpcbind Flatcar#2223
sys-apps/acl: [PROD] [DEV]
- still at 2.4.0-r2
- package became stable on 'amd64'
- package became stable on 'arm64'
sys-apps/attr: [PROD] [DEV]
- still at 2.6.0
- package became stable on 'amd64'
- package became stable on 'arm64'
sys-apps/findutils: [PROD] [DEV]
- from 4.10.0 to 4.11.0
- release notes: https://cgit.git.savannah.gnu.org/cgit/findutils.git/tree/NEWS?h=v4.11.0
sys-apps/pkgcore:
- from 0.12.35 to 0.12.39
- build dependencies:
  - changes for dev-python/snakeoil:
    - changed version constraint from >=0.11.1 to >=0.11.4
- runtime dependencies:
  - changes for dev-python/snakeoil:
    - changed version constraint from >=0.11.1 to >=0.11.4
- release notes: https://github.com/pkgcore/pkgcore/releases/tag/v0.12.39
sys-apps/portage: [DEV]
- from 3.0.81.2 to 3.0.81.3
- release notes: https://raw.githubusercontent.com/gentoo/portage/refs/tags/portage-3.0.81.3/NEWS
sys-block/open-iscsi: [PROD] [DEV]
- still at 2.1.11
- fixes CVE-2026-44943, CVE-2026-44944 through backported patches
  - update: sys-block/open-iscsi Flatcar#2249
sys-devel/binutils: [DEV]
- from 2.46.0 to 2.46.1
- package became unstable on 'arm64'
- added IUSE flag 'verify-sig'
- build dependencies:
  - added a dependency '>=app-portage/gemato-20' for USE 'verify-sig?'
  - added a dependency 'sec-keys/openpgp-keys-binutils' for USE 'verify-sig?'
  - added a dependency 'app-alternatives/gpg' for USE 'verify-sig?' -> '||'
  - added a dependency 'app-crypt/gnupg[-alternatives(-)]' for USE 'verify-sig?' -> '||'
- release notes: https://lists.gnu.org/archive/html/info-gnu/2026-06/msg00003.html
sys-firmware/intel-microcode: [PROD] [DEV]
- from 20260512_p20260513 to 20260812_p20260813
- fixes CVE-2025-31936, CVE-2025-31938, CVE-2025-35973, CVE-2026-20707, CVE-2026-20713, CVE-2026-20716, CVE-2026-20760, CVE-2026-20917
  - update: sys-firmware/intel-microcode Flatcar#2331
- package became unstable on 'amd64'
- release notes: https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20260812 https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20260811
sys-libs/binutils-libs: [PROD] [DEV]
- from 2.46.0 to 2.46.1
- package became unstable on 'arm64'
- added IUSE flag 'verify-sig'
- build dependencies:
  - added a dependency '>=app-portage/gemato-20' for USE 'verify-sig?'
  - added a dependency 'sec-keys/openpgp-keys-binutils' for USE 'verify-sig?'
  - added a dependency 'app-alternatives/gpg' for USE 'verify-sig?' -> '||'
  - added a dependency 'app-crypt/gnupg[-alternatives(-)]' for USE 'verify-sig?' -> '||'
- release notes: https://lists.gnu.org/archive/html/info-gnu/2026-06/msg00003.html
virtual/acl: [SYSEXT-INCUS]
- from 0-r2 to 2.4.0
- EAPI changed from '7' to '8'
- package became unstable on 'amd64'
- package became unstable on 'arm64'
- runtime dependencies:
  - changes for sys-apps/acl with USE conditionals 'kernel_linux?':
    - changed version constraint from >=2.2.52-r1 to >=2.4.0

--

changelog
image diff

It's from Gentoo commit 6df401bb7db4d5a5e4cf416388ed08b3f2232631. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit 7014292056a82964f739b15859d1ae2b3d3c18a0. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit 883541097b9e079a62e0db4db120ce654635f52f. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit b1210c8231ec8a452fcf57b6407942584618a755. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit 9ed3e2df239e09d1e328be3da70de03c40f2fe58. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit 65c4452fc27b92dbc1d87b7542bf27430803882d. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit 2d41ffdea5794de159bf18ce5ad6bd23f24cbcee. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit 02ce01ec05ef283c92c7f17428c696bd7cd0c5d5. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit cac388d61497751ed9234256ccbb8710a53c0589. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit 2b5af5e8471f7a065c724e84e729ad554deb3fd3. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit be86282032430a9bafa65e55e37ed3c2f188a531. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit 95aff9e8f03228512791c6b64a94bbab3e0a7dfc. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit 63a0f4f9f96567d63213236ea9320ca2883d63bd. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit d1f6fe6ccb9a3b2741cf2250816c816be5edf4e1. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit 6f33a772199fe94fad2f18e603d041fe68fbaee8. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit 51b7f3e43299a02e8aebae02bd0f46c95fbc8bdc. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit b08688a9358e889c04006f7cdb4207bb88477777. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit 1512409365077cc5553061c9078f08caf9983ef0. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit e4b2c316bdc2ac6dcfd81bb57d5833dcc2c0e424. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit a12f5111b74ee41e1efa1be5b66e26b27da1496c. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit 01c32c5a9e98dedb27587c783f7e060eae86d451. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit b04052800f79d39d631e26433b62a5c4ca2beed2. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit cde4bf7c76900144b9c4c99125af93b6be6ee9b6. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit 8ff6f2cdfd494e83a4faaafee327a4afab89d7b4. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit b6729ab03bb45b2e78209fb13df19a77eb8e2f06. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>

But this time yell quite loud about it, so it will be visible in the occurences file. And I will remember to reinstate it next time instead of spending more time to investigate it. But at least the investigation resulted in dropping the patch - it is enough to just regenerate the build system. Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>

It's from Gentoo commit 7bf120b3471b724503d8df025a37aaee8a1bd6bc. Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>

We just updated it to 3.6.4 to address even more security issues. Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>

krnowak · 2026-09-04T11:32:03Z

CI passed.

…etcd" This reverts commit fdd9aa7. dev-db/etcd-3.5.26 repeatedly fails to build, so revert this update too for now. Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>

Rsync 3.5.0 treats all absolute symlinks as unsafe, so when stumbling on such one, it fails the operation. In our case /home/sdk/trunk is an absolute symlink to /mnt/host/…, so building production images and developer containers fail. Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>

Copilot

🟡 Changes recommended

Several changes introduce concrete correctness/security/maintainability issues (grep regex bug, toolchain target handling mismatch, rsync --insecure-links, and un-applied patch distfiles) that should be addressed before approval.

Once you've addressed the issues Copilot identified, you can request another Copilot review.

Pull request overview

Weekly sync of portage-stable and related overlay content, updating package ebuilds/manifests/profiles plus a few Flatcar build-time tweaks to keep the SDK/dev/prod image assembly working with the refreshed tree.

Changes:

Bump/add/remove a large set of Gentoo portage-stable ebuilds, manifests, patches, and profile masks/forces/deprecations.
Update several eclasses (notably perl-module, toolchain, user-info, prefix, acct-group) and add new licenses.
Adjust Flatcar build scripts and a local bind ebuild carry patching.

File summaries

File	Description
sdk_container/src/third_party/portage-stable/x11-misc/makedepend/Manifest	manifest update
sdk_container/src/third_party/portage-stable/x11-misc/makedepend/makedepend-1.0.10.ebuild	new ebuild
sdk_container/src/third_party/portage-stable/x11-drivers/nvidia-drivers/nvidia-drivers-595.91.07.ebuild	config check tweak
sdk_container/src/third_party/portage-stable/x11-drivers/nvidia-drivers/nvidia-drivers-580.178.04.ebuild	config check tweak
sdk_container/src/third_party/portage-stable/virtual/acl/acl-2.4.0.ebuild	new virtual
sdk_container/src/third_party/portage-stable/sys-process/audit/Manifest	manifest update
sdk_container/src/third_party/portage-stable/sys-libs/libcap-ng/Manifest	manifest bump
sdk_container/src/third_party/portage-stable/sys-libs/libcap-ng/files/libcap-ng-0.8.5-python.patch	patch removed
sdk_container/src/third_party/portage-stable/sys-libs/binutils-libs/binutils-libs-2.46.1.ebuild	keywords update
sdk_container/src/third_party/portage-stable/sys-kernel/dracut/Manifest	manifest update
sdk_container/src/third_party/portage-stable/sys-fs/cryptsetup/cryptsetup-2.8.7.ebuild	keywords update
sdk_container/src/third_party/portage-stable/sys-devel/gnuconfig/Manifest	manifest update
sdk_container/src/third_party/portage-stable/sys-devel/gnuconfig/gnuconfig-99999999.ebuild	src_uri update
sdk_container/src/third_party/portage-stable/sys-devel/gnuconfig/gnuconfig-20260517.ebuild	new ebuild
sdk_container/src/third_party/portage-stable/sys-devel/gcc/gcc-17.0.0_p20260823.ebuild	patchlevel bump
sdk_container/src/third_party/portage-stable/sys-devel/gcc/gcc-17.0.0_p20260816.ebuild	apply extra patches
sdk_container/src/third_party/portage-stable/sys-devel/gcc/gcc-16.3.9999.ebuild	branch/patch vars update
sdk_container/src/third_party/portage-stable/sys-devel/gcc/gcc-16.2.1_p20260822.ebuild	patch vars update
sdk_container/src/third_party/portage-stable/sys-devel/gcc/gcc-16.2.1_p20260815.ebuild	patch vars update
sdk_container/src/third_party/portage-stable/sys-devel/gcc/gcc-16.2.1_p20260808.ebuild	patch vars update
sdk_container/src/third_party/portage-stable/sys-devel/binutils/binutils-2.46.1.ebuild	keywords update
sdk_container/src/third_party/portage-stable/sys-auth/sssd/sssd-2.9.9-r1.ebuild	deps/python compat
sdk_container/src/third_party/portage-stable/sys-auth/sssd/sssd-2.13.1.ebuild	systemtap workaround
sdk_container/src/third_party/portage-stable/sys-auth/sssd/sssd-2.13.1-r1.ebuild	required_use/deps
sdk_container/src/third_party/portage-stable/sys-auth/pambase/pambase-20260730.ebuild	keywords update
sdk_container/src/third_party/portage-stable/sys-apps/pkgcore/pkgcore-9999.ebuild	snakeoil dep bump
sdk_container/src/third_party/portage-stable/sys-apps/pkgcore/pkgcore-0.12.40.ebuild	snakeoil dep bump
sdk_container/src/third_party/portage-stable/sys-apps/pkgcore/pkgcore-0.12.39.ebuild	python compat/tests
sdk_container/src/third_party/portage-stable/sys-apps/pkgcore/pkgcore-0.12.38.ebuild	pytest plugins
sdk_container/src/third_party/portage-stable/sys-apps/pkgcore/pkgcore-0.12.37.ebuild	ebuild removed
sdk_container/src/third_party/portage-stable/sys-apps/gawk/gawk-5.4.1-r1.ebuild	patchset change
sdk_container/src/third_party/portage-stable/sys-apps/gawk/files/gawk-5.4.0-no-assertions-for-pma.patch	patch removed
sdk_container/src/third_party/portage-stable/sys-apps/gawk/files/gawk-5.4.0-Fix-gensub-bug-for-use-with-MinRX.-Add-test-case.patch	patch removed
sdk_container/src/third_party/portage-stable/sys-apps/findutils/findutils-4.11.0.ebuild	keywords update
sdk_container/src/third_party/portage-stable/sys-apps/attr/attr-2.6.0.ebuild	keywords update
sdk_container/src/third_party/portage-stable/sys-apps/acl/acl-2.4.0-r2.ebuild	keywords update
sdk_container/src/third_party/portage-stable/profiles/updates/4Q-2024	updates cleanup
sdk_container/src/third_party/portage-stable/profiles/package.deprecated	deprecation entry removed
sdk_container/src/third_party/portage-stable/profiles/features/wd40/use.mask	mask updates
sdk_container/src/third_party/portage-stable/profiles/features/wd40/package.use.mask	mask updates
sdk_container/src/third_party/portage-stable/profiles/features/musl/package.use.mask	musl mask update
sdk_container/src/third_party/portage-stable/profiles/features/musl/package.mask	musl mask update
sdk_container/src/third_party/portage-stable/profiles/features/big-endian/use.mask	big-endian mask
sdk_container/src/third_party/portage-stable/profiles/features/big-endian/package.use.mask	big-endian use mask
sdk_container/src/third_party/portage-stable/profiles/features/big-endian/package.mask	big-endian pkg mask
sdk_container/src/third_party/portage-stable/profiles/default/linux/ppc64le/package.use.mask	ppc64le mask
sdk_container/src/third_party/portage-stable/profiles/base/package.use.force	forced USE update
sdk_container/src/third_party/portage-stable/profiles/arch/x86/package.use.stable.mask	arch mask update
sdk_container/src/third_party/portage-stable/profiles/arch/sparc/package.use.stable.mask	arch mask update
sdk_container/src/third_party/portage-stable/profiles/arch/sparc/package.use.mask	arch mask update
sdk_container/src/third_party/portage-stable/profiles/arch/s390/package.use.mask	arch mask update
sdk_container/src/third_party/portage-stable/profiles/arch/powerpc/ppc64/package.use.mask	arch mask update
sdk_container/src/third_party/portage-stable/profiles/arch/powerpc/ppc64/64le/package.use.stable.mask	arch mask update
sdk_container/src/third_party/portage-stable/profiles/arch/powerpc/ppc64/64le/package.use.mask	arch mask update
sdk_container/src/third_party/portage-stable/profiles/arch/powerpc/ppc32/package.use.mask	arch mask update
sdk_container/src/third_party/portage-stable/profiles/arch/powerpc/package.use.mask	arch mask update
sdk_container/src/third_party/portage-stable/profiles/arch/mips/package.use.mask	arch mask update
sdk_container/src/third_party/portage-stable/profiles/arch/m68k/package.use.mask	arch mask update
sdk_container/src/third_party/portage-stable/profiles/arch/loong/package.use.mask	arch mask update
sdk_container/src/third_party/portage-stable/profiles/arch/hppa/package.use.mask	arch mask update
sdk_container/src/third_party/portage-stable/profiles/arch/base/use.mask	spelling fix
sdk_container/src/third_party/portage-stable/profiles/arch/base/package.use.mask	mask update
sdk_container/src/third_party/portage-stable/profiles/arch/arm64/package.use.stable.mask	arch mask update
sdk_container/src/third_party/portage-stable/profiles/arch/arm64/package.use.force	forced USE update
sdk_container/src/third_party/portage-stable/profiles/arch/arm/package.use.stable.mask	arch mask update
sdk_container/src/third_party/portage-stable/profiles/arch/arm/package.use.mask	arch mask update
sdk_container/src/third_party/portage-stable/profiles/arch/amd64/x32/package.mask	mask update
sdk_container/src/third_party/portage-stable/profiles/arch/amd64/package.use.mask	mask update
sdk_container/src/third_party/portage-stable/profiles/arch/alpha/package.use.mask	mask update
sdk_container/src/third_party/portage-stable/net-misc/rsync/files/rsync-3.4.1-CVE-2025-10158.patch	patch removed
sdk_container/src/third_party/portage-stable/net-misc/rsync/files/rsync-3.4.1-c23.patch	patch removed
sdk_container/src/third_party/portage-stable/net-misc/passt/passt-9999.ebuild	apply musl patch
sdk_container/src/third_party/portage-stable/net-misc/passt/passt-2026.07.28.ebuild	apply musl patch
sdk_container/src/third_party/portage-stable/net-misc/passt/files/passt-2026.07.28-musl.patch	new patch
sdk_container/src/third_party/portage-stable/net-misc/openssh/openssh-10.4_p1-r1.ebuild	keywords update
sdk_container/src/third_party/portage-stable/net-misc/curl/curl-8.21.0-r1.ebuild	test deselect
sdk_container/src/third_party/portage-stable/net-libs/ngtcp2/ngtcp2-9999.ebuild	keywords update
sdk_container/src/third_party/portage-stable/net-libs/ngtcp2/ngtcp2-1.25.0.ebuild	keywords update
sdk_container/src/third_party/portage-stable/net-libs/ngtcp2/ngtcp2-1.24.0.ebuild	keywords update
sdk_container/src/third_party/portage-stable/net-libs/ngtcp2/ngtcp2-1.23.0.ebuild	keywords update
sdk_container/src/third_party/portage-stable/net-libs/nghttp2/nghttp2-1.70.0.ebuild	add patch
sdk_container/src/third_party/portage-stable/net-libs/nghttp2/files/nghttp2-1.70.0-gcc17.patch	new patch
sdk_container/src/third_party/portage-stable/net-libs/gnutls/gnutls-3.8.13.ebuild	keywords update
sdk_container/src/third_party/portage-stable/net-fs/samba/samba-4.24.6.ebuild	keywords/versions
sdk_container/src/third_party/portage-stable/net-fs/samba/samba-4.23.11.ebuild	talloc/tdb revert
sdk_container/src/third_party/portage-stable/net-dns/bind/bind-9.20.26.ebuild	Flatcar carry patch
sdk_container/src/third_party/portage-stable/net-dns/bind/bind-9.20.23.ebuild	drop carry patch
sdk_container/src/third_party/portage-stable/licenses/Unlicense	new license
sdk_container/src/third_party/portage-stable/licenses/Boost-1.0	new license
sdk_container/src/third_party/portage-stable/eclass/user-info.eclass	shadow support
sdk_container/src/third_party/portage-stable/eclass/toolchain.eclass	build-id logic
sdk_container/src/third_party/portage-stable/eclass/prefix.eclass	EAPI 9 support
sdk_container/src/third_party/portage-stable/eclass/perl-module.eclass	Dist::Build handling
sdk_container/src/third_party/portage-stable/eclass/acct-group.eclass	safer groupadd
sdk_container/src/third_party/portage-stable/dev-util/pkgcheck/pkgcheck-0.10.42.ebuild	keywords update
sdk_container/src/third_party/portage-stable/dev-util/pkgcheck/Manifest	manifest prune
sdk_container/src/third_party/portage-stable/dev-util/perf/perf-7.1.ebuild	capstone constraint
sdk_container/src/third_party/portage-stable/dev-util/perf/perf-7.0.ebuild	capstone constraint
sdk_container/src/third_party/portage-stable/dev-util/perf/perf-6.19.12.ebuild	capstone constraint
sdk_container/src/third_party/portage-stable/dev-util/pahole/pahole-1.31.ebuild	keywords update
sdk_container/src/third_party/portage-stable/dev-util/glib-utils/glib-utils-2.88.3.ebuild	python compat
sdk_container/src/third_party/portage-stable/dev-util/gdbus-codegen/gdbus-codegen-2.88.3.ebuild	src_uri patch
sdk_container/src/third_party/portage-stable/dev-python/wheel/wheel-0.48.0.ebuild	new ebuild
sdk_container/src/third_party/portage-stable/dev-python/vcs-versioning/vcs-versioning-2.3.1.ebuild	new ebuild
sdk_container/src/third_party/portage-stable/dev-python/vcs-versioning/vcs-versioning-2.3.0.ebuild	new ebuild
sdk_container/src/third_party/portage-stable/dev-python/vcs-versioning/vcs-versioning-2.2.4.ebuild	compat/deps update
sdk_container/src/third_party/portage-stable/dev-python/tree-sitter/tree-sitter-0.26.0.ebuild	keywords update
sdk_container/src/third_party/portage-stable/dev-python/snakeoil/snakeoil-9999.ebuild	test dep
sdk_container/src/third_party/portage-stable/dev-python/snakeoil/snakeoil-0.11.4.ebuild	test dep
sdk_container/src/third_party/portage-stable/dev-python/snakeoil/snakeoil-0.11.3.ebuild	ebuild removed
sdk_container/src/third_party/portage-stable/dev-python/snakeoil/snakeoil-0.11.2.ebuild	ebuild removed
sdk_container/src/third_party/portage-stable/dev-python/snakeoil/snakeoil-0.11.0.ebuild	ebuild removed
sdk_container/src/third_party/portage-stable/dev-python/setuptools/setuptools-83.0.0.ebuild	pytest flags
sdk_container/src/third_party/portage-stable/dev-python/setuptools/Manifest	manifest update
sdk_container/src/third_party/portage-stable/dev-python/setuptools-scm/setuptools-scm-10.2.1.ebuild	keywords update
sdk_container/src/third_party/portage-stable/dev-python/pygments/pygments-2.21.0.ebuild	new ebuild
sdk_container/src/third_party/portage-stable/dev-python/pygments/Manifest	manifest update
sdk_container/src/third_party/portage-stable/dev-python/platformdirs/platformdirs-4.11.3.ebuild	new ebuild
sdk_container/src/third_party/portage-stable/dev-python/platformdirs/platformdirs-4.10.1.ebuild	keywords update
sdk_container/src/third_party/portage-stable/dev-python/pkg-resources/pkg-resources-81.0.0.ebuild	pytest args
sdk_container/src/third_party/portage-stable/dev-python/pip/pip-26.1.2-r1.ebuild	keywords update
sdk_container/src/third_party/portage-stable/dev-python/packaging/packaging-26.3.ebuild	flit-core/keywords
sdk_container/src/third_party/portage-stable/dev-python/lxml/Manifest	manifest update
sdk_container/src/third_party/portage-stable/dev-python/jaraco-text/jaraco-text-4.3.0.ebuild	keywords update
sdk_container/src/third_party/portage-stable/dev-python/jaraco-functools/jaraco-functools-4.6.0.ebuild	keywords update
sdk_container/src/third_party/portage-stable/dev-python/idna/idna-3.19.ebuild	new ebuild
sdk_container/src/third_party/portage-stable/dev-python/hatchling/Manifest	manifest update
sdk_container/src/third_party/portage-stable/dev-python/hatchling/hatchling-1.32.0.ebuild	deps/keywords
sdk_container/src/third_party/portage-stable/dev-python/hatchling/hatchling-1.31.0.ebuild	keywords update
sdk_container/src/third_party/portage-stable/dev-python/gpep517/gpep517-20.ebuild	keywords update
sdk_container/src/third_party/portage-stable/dev-python/flit-core/flit-core-4.0.2.ebuild	new ebuild
sdk_container/src/third_party/portage-stable/dev-python/fastjsonschema/fastjsonschema-2.22.2.ebuild	new ebuild
sdk_container/src/third_party/portage-stable/dev-python/ensurepip-setuptools/ensurepip-setuptools-83.0.0.ebuild	keywords update
sdk_container/src/third_party/portage-stable/dev-python/dependency-groups/dependency-groups-1.3.2.ebuild	new ebuild
sdk_container/src/third_party/portage-stable/dev-python/cython/cython-3.3.0.ebuild	python compat
sdk_container/src/third_party/portage-stable/dev-python/cython/cython-3.2.9.ebuild	keywords update
sdk_container/src/third_party/portage-stable/dev-python/charset-normalizer/charset-normalizer-3.5.1.ebuild	new ebuild
sdk_container/src/third_party/portage-stable/dev-python/charset-normalizer/charset-normalizer-3.5.0.ebuild	new ebuild
sdk_container/src/third_party/portage-stable/dev-python/charset-normalizer/charset-normalizer-3.4.9.ebuild	IUSE default
sdk_container/src/third_party/portage-stable/dev-python/charset-normalizer/charset-normalizer-3.4.7.ebuild	python compat
sdk_container/src/third_party/portage-stable/dev-python/cffi/Manifest	manifest update
sdk_container/src/third_party/portage-stable/dev-libs/tree-sitter/tree-sitter-0.26.12.ebuild	new ebuild
sdk_container/src/third_party/portage-stable/dev-libs/tree-sitter/tree-sitter-0.26.11.ebuild	keywords update
sdk_container/src/third_party/portage-stable/dev-libs/openssl/openssl-4.0.9999.ebuild	openpgp key bump
sdk_container/src/third_party/portage-stable/dev-libs/openssl/openssl-4.0.2.ebuild	patch/key bump
sdk_container/src/third_party/portage-stable/dev-libs/openssl/openssl-3.6.9999.ebuild	openpgp key bump
sdk_container/src/third_party/portage-stable/dev-libs/openssl/openssl-3.6.4.ebuild	key/keywords update
sdk_container/src/third_party/portage-stable/dev-libs/openssl/openssl-3.5.9999.ebuild	openpgp key bump
sdk_container/src/third_party/portage-stable/dev-libs/openssl/openssl-3.5.8.ebuild	openpgp key bump
sdk_container/src/third_party/portage-stable/dev-libs/openssl/openssl-3.4.9999.ebuild	openpgp key bump
sdk_container/src/third_party/portage-stable/dev-libs/openssl/openssl-3.4.7.ebuild	openpgp key bump
sdk_container/src/third_party/portage-stable/dev-libs/openssl/openssl-3.0.9999.ebuild	openpgp key bump
sdk_container/src/third_party/portage-stable/dev-libs/openssl/openssl-3.0.22.ebuild	openpgp key bump
sdk_container/src/third_party/portage-stable/dev-libs/opensc/Manifest	manifest prune
sdk_container/src/third_party/portage-stable/dev-libs/libksba/libksba-1.8.0.ebuild	homepage tweak
sdk_container/src/third_party/portage-stable/dev-libs/libevent/libevent-2.1.13.ebuild	keywords update
sdk_container/src/third_party/portage-stable/dev-libs/leancrypto/leancrypto-1.8.0.ebuild	keywords update
sdk_container/src/third_party/portage-stable/dev-libs/glib/glib-2.88.3.ebuild	add distfile
sdk_container/src/third_party/portage-stable/dev-libs/expat/Manifest	manifest update
sdk_container/src/third_party/portage-stable/dev-lang/rust/rust-1.96.1.ebuild	keywords update
sdk_container/src/third_party/portage-stable/dev-lang/rust-common/rust-common-1.96.1.ebuild	keywords update
sdk_container/src/third_party/portage-stable/dev-lang/rust-bin/rust-bin-1.96.1.ebuild	keywords update
sdk_container/src/third_party/portage-stable/dev-lang/python/python-3.15.9999.ebuild	python-exec support
sdk_container/src/third_party/portage-stable/dev-lang/python/python-0.3.15.9999.ebuild	python-exec support
sdk_container/src/third_party/portage-stable/dev-lang/go/go-1.25.12.ebuild	keywords update
sdk_container/src/third_party/portage-stable/dev-lang/go/go-1.24.12-r1.ebuild	keywords update
sdk_container/src/third_party/portage-stable/dev-db/sqlite/sqlite-3.53.3.ebuild	keywords update
sdk_container/src/third_party/portage-stable/dev-db/etcd/files/etcd-3.7.1-vendor.patch	new patch
sdk_container/src/third_party/portage-stable/dev-db/etcd/etcd-3.6.14.ebuild	commit/go dep
sdk_container/src/third_party/portage-stable/dev-db/etcd/etcd-3.6.11.ebuild	keywords update
sdk_container/src/third_party/portage-stable/dev-build/meson/meson-9999.ebuild	vala setup move
sdk_container/src/third_party/portage-stable/dev-build/meson/meson-1.12.0.ebuild	vala setup move
sdk_container/src/third_party/portage-stable/dev-build/meson/meson-1.11.2.ebuild	keywords/vala setup
sdk_container/src/third_party/portage-stable/dev-build/meson/meson-1.11.1.ebuild	keywords/vala setup
sdk_container/src/third_party/portage-stable/app-text/scdoc/scdoc-1.11.5.ebuild	keywords update
sdk_container/src/third_party/portage-stable/app-shells/bash/bash-5.3_p15.ebuild	keywords update
sdk_container/src/third_party/portage-stable/app-shells/bash-completion/bash-completion-2.18.0.ebuild	keywords update
sdk_container/src/third_party/portage-stable/app-portage/gentoolkit/Manifest	manifest prune
sdk_container/src/third_party/portage-stable/app-portage/gentoolkit/gentoolkit-0.8.0.ebuild	keywords update
sdk_container/src/third_party/portage-stable/app-misc/jq/Manifest	manifest prune
sdk_container/src/third_party/portage-stable/app-misc/jq/jq-1.8.2.ebuild	keywords update
sdk_container/src/third_party/portage-stable/app-emulation/qemu/qemu-9.2.4.ebuild	dep tweak
sdk_container/src/third_party/portage-stable/app-emulation/qemu/qemu-10.2.3.ebuild	keywords update
sdk_container/src/third_party/portage-stable/app-crypt/gpgme/gpgme-2.1.2.ebuild	keywords update
sdk_container/src/third_party/portage-stable/app-crypt/gnupg/gnupg-2.5.21.ebuild	keywords update
sdk_container/src/third_party/portage-stable/app-containers/runc/runc-1.4.3.ebuild	keywords update
sdk_container/src/third_party/portage-stable/app-containers/podman/podman-9999.ebuild	selinux opts
sdk_container/src/third_party/portage-stable/app-containers/podman/podman-6.0.2.ebuild	selinux opts
sdk_container/src/third_party/portage-stable/app-containers/incus/incus-9999.ebuild	go dep bump
sdk_container/src/third_party/portage-stable/app-containers/docker/docker-29.5.2.ebuild	keywords update
sdk_container/src/third_party/portage-stable/app-containers/docker-cli/docker-cli-29.5.2.ebuild	keywords update
sdk_container/src/third_party/portage-stable/app-containers/docker-buildx/docker-buildx-0.35.0.ebuild	keywords update
sdk_container/src/third_party/portage-stable/app-containers/crun/crun-1.28.ebuild	python/keywords
sdk_container/src/third_party/portage-stable/app-containers/containerd/containerd-2.3.2-r1.ebuild	keywords update
sdk_container/src/third_party/portage-stable/app-arch/zip/Manifest	manifest update
sdk_container/src/third_party/portage-stable/app-arch/zip/files/zip-3.0_p16-zipnote-freeze.patch	new patch
sdk_container/src/third_party/portage-stable/app-arch/tar/tar-1.35-r1.ebuild	toolchain/tests
sdk_container/src/third_party/portage-stable/app-arch/gzip/files/gzip-1.14-zgrep.patch	new patch
sdk_container/src/third_party/portage-stable/app-arch/gzip/files/gzip-1.14-CVE-2026-41992.patch	new patch
sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.mask	mask etcd
sdk_container/src/third_party/coreos-overlay/coreos/user-patches/sys-block/open-iscsi/README.md	clarify patches
sdk_container/src/third_party/coreos-overlay/coreos/user-patches/sys-block/open-iscsi/0001-open-iscsi-startup-automatic.patch	new patch
sdk_container/src/third_party/coreos-overlay/coreos/user-patches/net-nds/rpcbind/README.md	new readme
sdk_container/src/third_party/coreos-overlay/coreos/user-patches/net-nds/rpcbind/0001-rpcinfo-stack-buffer-overflow-in-rpcinfo-rpcbaddrlis.patch	new patch
build_library/prod_image_util.sh	rsync flags
build_library/dev_container_util.sh	rsync flags
.github/workflows/portage-stable-packages-list	allow new eclass

Review details

Files reviewed: 260/476 changed files
Comments generated: 6
Review effort level: Lite

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

        sudo mkdir -p "${root_fs_dir}/var/lib/portage/${repo}"
-        sudo rsync -rtl --exclude=md5-cache \
+        sudo rsync -rtl --exclude=md5-cache --insecure-links \
            "${SRC_ROOT}/third_party/${repo}/metadata" \
            "${SRC_ROOT}/third_party/${repo}/profiles" \
            "${root_fs_dir}/var/lib/portage/${repo}"


  sudo cp -a "${root_fs_dir}" "${BUILD_DIR}/root_fs_dir2"
-  sudo rsync -a --delete  "${BUILD_DIR}/configroot/etc/portage" "${BUILD_DIR}/root_fs_dir2/etc"
+  sudo rsync -a --delete --insecure-links "${BUILD_DIR}/configroot/etc/portage" "${BUILD_DIR}/root_fs_dir2/etc"
  sudo mksquashfs "${BUILD_DIR}/root_fs_dir2"  "${BUILD_DIR}/${image_sysext_base}" -noappend -xattrs-exclude '^btrfs.'


 	fi

-	if [[ ( ${PREFER_BUILDPL} == yes || ! -f Makefile.PL ) && -f Build.PL ]] ; then
+	if [[ -f Build.PL ]] && grep -q '\(use\|require\)\s* Dist::Build' Build.PL ; then


 	# Turn on the -Wl,--build-id flag by default for ELF targets. bug #953869
 	# This helps with locating debug files.
 	case ${CTARGET} in
-		*-linux-*|*-elf|*-eabi)
+		*-linux-*)
 			tc_version_is_at_least 4.5 && confgcc+=(


 SRC_URI="
 	${SRC_URI}
+	https://distfiles.gentoo.org/pub/dev/sam%40gentoo.org/${CATEGORY}/${PN}/${PN}-2.88.2-const-whoops.patch.xz
 	introspection? ( mirror://gnome/sources/gobject-introspection/${INTROSPECTION_PV%.*}/gobject-introspection-${INTROSPECTION_PV}.tar.${GNOME_TARBALL_SUFFIX} )
 "


 DESCRIPTION="GDBus code and documentation generator"
 HOMEPAGE="https://www.gtk.org/"
+SRC_URI+=" https://distfiles.gentoo.org/pub/dev/sam%40gentoo.org/dev-libs/glib/glib-2.88.2-const-whoops.patch.xz"

 S="${WORKDIR}/glib-${PV}/gio/gdbus-2.0/codegen"


github-actions Bot added the main label Aug 24, 2026

krnowak force-pushed the buildbot/weekly-portage-stable-package-updates-2026-08-24 branch from 5a339a8 to 6384317 Compare August 28, 2026 14:51

krnowak had a problem deploying to development August 28, 2026 14:51 — with GitHub Actions Error

krnowak added this to Flatcar tactical, release planning, and roadmap Aug 28, 2026

krnowak moved this to ⚒️ In Progress in Flatcar tactical, release planning, and roadmap Aug 28, 2026

Flatcar Buildbot added 25 commits September 4, 2026 12:19

app-arch/gzip: Sync with Gentoo

bcbae57

It's from Gentoo commit 6df401bb7db4d5a5e4cf416388ed08b3f2232631. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

app-arch/tar: Sync with Gentoo

8802890

It's from Gentoo commit 7014292056a82964f739b15859d1ae2b3d3c18a0. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

app-arch/unzip: Sync with Gentoo

86b97fe

It's from Gentoo commit 883541097b9e079a62e0db4db120ce654635f52f. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

app-arch/zip: Sync with Gentoo

5e1b363

It's from Gentoo commit b1210c8231ec8a452fcf57b6407942584618a755. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

app-containers/aardvark-dns: Sync with Gentoo

5945e47

It's from Gentoo commit 9ed3e2df239e09d1e328be3da70de03c40f2fe58. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

app-containers/containerd: Sync with Gentoo

2146693

It's from Gentoo commit 65c4452fc27b92dbc1d87b7542bf27430803882d. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

app-containers/crun: Sync with Gentoo

0873cdb

It's from Gentoo commit 2d41ffdea5794de159bf18ce5ad6bd23f24cbcee. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

app-containers/docker: Sync with Gentoo

d8706ab

It's from Gentoo commit 02ce01ec05ef283c92c7f17428c696bd7cd0c5d5. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

app-containers/docker-buildx: Sync with Gentoo

4b442aa

It's from Gentoo commit cac388d61497751ed9234256ccbb8710a53c0589. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

app-containers/docker-cli: Sync with Gentoo

36839ea

It's from Gentoo commit 2b5af5e8471f7a065c724e84e729ad554deb3fd3. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

app-containers/incus: Sync with Gentoo

23db4ef

It's from Gentoo commit be86282032430a9bafa65e55e37ed3c2f188a531. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

app-containers/netavark: Sync with Gentoo

8abbea5

It's from Gentoo commit 95aff9e8f03228512791c6b64a94bbab3e0a7dfc. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

app-containers/podman: Sync with Gentoo

33cb04d

It's from Gentoo commit 63a0f4f9f96567d63213236ea9320ca2883d63bd. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

app-containers/runc: Sync with Gentoo

9334b68

It's from Gentoo commit d1f6fe6ccb9a3b2741cf2250816c816be5edf4e1. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

app-crypt/gnupg: Sync with Gentoo

0cb234b

It's from Gentoo commit 6f33a772199fe94fad2f18e603d041fe68fbaee8. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

app-crypt/gpgme: Sync with Gentoo

e3c26d9

It's from Gentoo commit 51b7f3e43299a02e8aebae02bd0f46c95fbc8bdc. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

app-emulation/qemu: Sync with Gentoo

9b37606

It's from Gentoo commit b08688a9358e889c04006f7cdb4207bb88477777. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

app-emulation/qemu-guest-agent: Sync with Gentoo

9dea7cd

It's from Gentoo commit 1512409365077cc5553061c9078f08caf9983ef0. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

app-misc/jq: Sync with Gentoo

d177ead

It's from Gentoo commit e4b2c316bdc2ac6dcfd81bb57d5833dcc2c0e424. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

app-portage/gentoolkit: Sync with Gentoo

9a96ad2

It's from Gentoo commit a12f5111b74ee41e1efa1be5b66e26b27da1496c. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

app-shells/bash: Sync with Gentoo

1efec64

It's from Gentoo commit 01c32c5a9e98dedb27587c783f7e060eae86d451. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

app-shells/bash-completion: Sync with Gentoo

fec699d

It's from Gentoo commit b04052800f79d39d631e26433b62a5c4ca2beed2. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

app-text/scdoc: Sync with Gentoo

5600c9d

It's from Gentoo commit cde4bf7c76900144b9c4c99125af93b6be6ee9b6. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

dev-build/meson: Sync with Gentoo

4655f04

It's from Gentoo commit 8ff6f2cdfd494e83a4faaafee327a4afab89d7b4. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

dev-db/etcd: Sync with Gentoo

6d47406

It's from Gentoo commit b6729ab03bb45b2e78209fb13df19a77eb8e2f06. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

krnowak added 10 commits September 4, 2026 12:19

overlay profiles: Temporarily mask dev-db/etcd >=3.6

6b84c82

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>

dev-libs/openssl: Sync with Gentoo

57fdd8c

It's from Gentoo commit 7bf120b3471b724503d8df025a37aaee8a1bd6bc. Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>

overlay profiles: Add accept keywords for dev-libs/openssl

1cacaf9

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>

overlay coreos/user-patches: Drop patch for dev-libs/openssl

3eb321d

We just updated it to 3.6.4 to address even more security issues. Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>

overlay profiles: Pick up latest 3.5 version of dev-db/etcd

3027019

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>

overlay app-admin/etcd-wrapper: Sync version to match dev-db/etcd

0960f0d

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>

overlay profiles: Keep accept keyword entries sorted

105f21a

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>

changelog: Add entries

de6fe6c

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>

overlay profiles: Mask dev-db/etcd-3.5.26 too

c30df84

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>

krnowak mentioned this pull request Sep 4, 2026

Weekly portage-stable package updates 2026-08-31 #4247

Closed

2 tasks

krnowak force-pushed the buildbot/weekly-portage-stable-package-updates-2026-08-24 branch from 6384317 to 58450b2 Compare September 4, 2026 11:01

krnowak had a problem deploying to development September 4, 2026 11:01 — with GitHub Actions Error

krnowak moved this from ⚒️ In Progress to ✅ Testing / in Review in Flatcar tactical, release planning, and roadmap Sep 4, 2026

krnowak marked this pull request as ready for review September 4, 2026 11:32

Copilot AI lite review requested due to automatic review settings September 4, 2026 11:32

krnowak requested a review from a team as a code owner September 4, 2026 11:32

Copilot started reviewing on behalf of krnowak September 4, 2026 11:32 View session

krnowak added 4 commits September 4, 2026 13:33

Revert "overlay app-admin/etcd-wrapper: Sync version to match dev-db/…

f0fdf15

…etcd" This reverts commit fdd9aa7. dev-db/etcd-3.5.26 repeatedly fails to build, so revert this update too for now. Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>

overlay profiles: Bring back accept keywords for app-arch/gzip

8d48653

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>

changelog: Drop etcd from changelog

b152c96

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>

krnowak force-pushed the buildbot/weekly-portage-stable-package-updates-2026-08-24 branch from 58450b2 to b152c96 Compare September 4, 2026 11:34

krnowak requested a deployment to development September 4, 2026 11:34 — with GitHub Actions Waiting

Copilot AI reviewed Sep 4, 2026

View reviewed changes

chewi approved these changes Sep 4, 2026

View reviewed changes

krnowak merged commit 519d984 into main Sep 4, 2026
2 of 3 checks passed

krnowak deleted the buildbot/weekly-portage-stable-package-updates-2026-08-24 branch September 4, 2026 12:00

github-project-automation Bot moved this from ✅ Testing / in Review to Implemented in Flatcar tactical, release planning, and roadmap Sep 4, 2026

Navigation Menu

Uh oh!

Weekly portage-stable package updates 2026-08-24 - #4238

Weekly portage-stable package updates 2026-08-24#4238
krnowak merged 139 commits into
mainfrom
buildbot/weekly-portage-stable-package-updates-2026-08-24

github-actions Bot commented Aug 24, 2026 •

edited by krnowak

Loading

Uh oh!

krnowak commented Sep 4, 2026

Uh oh!

Copilot AI left a comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Uh oh!

Conversation

github-actions Bot commented Aug 24, 2026 • edited by krnowak Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

krnowak commented Sep 4, 2026

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

🟡 Changes recommended

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

github-actions Bot commented Aug 24, 2026 •

edited by krnowak

Loading