Hi,

I'm happy to announce that I've just released ptxdist-2026.09.0.

It's still summer, so another slow release cycle. There is nothing in there
that really stands out.

So it's mostly version bumps, a few SBoM related fixes and other small
changes.

Thanks to all contributors and - as always - the shortlog below.

Enjoy,
Michael Olbrich


Alexander Dahl (5):
      json-c: Add patches with memory fixes from upstream master
      dropbear: version bump 2026.92 -> 2026.94
      libmicrohttpd: version bump 1.0.5 -> 1.0.10
      libarchive: version bump 3.8.5 -> 3.8.9
      log4cplus: Pin down more configuration options

Artur Wiebe (2):
      wpewebkit: version bump 2.49.3 -> 2.52.4
      wpewebkit: switch to WPE Platform, drop libwpe/wpebackend-fdo/cog

Bastian Krause (2):
      host-ptx-code-signing-dev: update URL to GitHub
      host-extract-cert: update URL to GitHub

Christian Melki (23):
      ethtool: Version bump. 7.0 -> 7.1
      libffi: Version bump. 3.6.0 -> 3.7.1
      screen: Version bump. 5.0.1 -> 5.0.2
      wayland: Version bump. 1.25.0 -> 1.26.0
      jimtcl: Version bump. 0.83 -> 0.84.
      qemu: Version bump. 11.0.1 -> 11.0.3
      tpm2-tools: Version bump. 5.7 -> 5.8
      tpm2-tss: Version bump. 4.1.3 -> 4.2.0
      glib: Version bump. 2.88.2 -> 2.88.3
      hwdata: Version bump. 0.409 -> 0.410
      libffi: Version bump. 3.7.1 -> 3.8.0
      expat: Version bump. 2.8.2 -> 2.8.3
      linux-firmware: Version bump. 20260622 -> 20260810
      openssh: Version bump. 10.4p1 -> 10.5p1
      sdl2-image: Version bump. 2.8.8 -> 2.8.12
      procps: Version bump. 4.0.6 -> 4.0.7
      qemu: Version bump. 11.0.3 -> 11.1.0
      host-qemu: Follow target qemu bump. 11.0.3 -> 11.1.0
      strace: Version bump. 7.1 -> 7.2
      libevdev: Version bump. 1.13.6 -> 1.13.7
      libcap-ng: Version bump. 0.9.3 -> 0.9.5
      host-libcap-ng: Follow target libcap-ng bump. 0.9.3 -> 0.9.5
      openssl: Version bump. 3.5.7 -> 3.5.8

David Jander (1):
      libsoup: Update to 3.6.6

Gavin Schenk (2):
      report/cpe_check: skip malformed CPE dictionary entries
      report/cpe_check: support NVD's CPE Dictionary 2.0 feed

Lars Alex Pedersen (1):
      strongswan: version bump 6.0.5 -> 6.0.7

Michael Olbrich (6):
      libelf: version bump 0.190 -> 0.195
      ptxd_make_get_http: handle parallel downloads
      report: sort imports with ruff
      report/cyclonedx_sbom: remove unused local variable
      wpewebkit: readd Qt support
      (host-)protobuf-c: move to staging

Philipp Zabel (14):
      host-meson: version bump 1.11.1 -> 1.11.2
      mesalib: version bump 26.1.4 -> 26.1.5
      mesalib: version bump 26.1.5 -> 26.1.6
      mesalib: version bump 26.1.6 -> 26.2.1
      glslang: version bump 1.4.350.0 -> 1.4.357.0
      spirv-headers: version bump 1.4.350.0 -> 1.4.357.0
      spirv-tools: version bump 1.4.350.0 -> 1.4.357.0
      volk: version bump 1.4.350.0 -> 1.4.357.0
      vulkan-headers: version bump 1.4.350.0 -> 1.4.357.0
      vulkan-loader: version bump 1.4.350.0 -> 1.4.357.0
      vulkan-tools: version bump 1.4.350.0 -> 1.4.357.0
      vulkan-utility-libraries: version bump 1.4.350.0 -> 1.4.357.0
      vulkan-validationlayers: version bump 1.4.350.0 -> 1.4.357.0
      shaderc: version bump v2026.2 -> v2026.3

Sven Püschel (1):
      lvm2: move lvmdump and fsadm into separate options

Thorsten Scherer (1):
      xorg-font-ttf-nanum-gothic: New package


-- 
Pengutronix e.K.                           |                             |
Steuerwalder Str. 21                       | http://www.pengutronix.de/  |
31137 Hildesheim, Germany                  | Phone: +49-5121-206917-0    |
Amtsgericht Hildesheim, HRA 2686           | Fax:   +49-5121-206917-5555 |