Weekly portage-stable package updates 2026-07-06

.github/workflows/portage-stable-packages-list

@@ -175,6 +175,7 @@ app-misc/mime-types
 app-misc/pax-utils
 
 app-portage/elt-patches
+app-portage/gemato
 app-portage/gentoolkit
 app-portage/getuto
 app-portage/portage-utils
@@ -310,7 +311,6 @@ dev-libs/yajl
 dev-perl/File-Slurper
 dev-perl/Parse-Yapp
 
-dev-python/backports-tarfile
 dev-python/cachecontrol
 dev-python/certifi
 dev-python/cffi
@@ -354,6 +354,7 @@ dev-python/packaging
 dev-python/pathspec
 dev-python/pefile
 dev-python/pip
+dev-python/pkg-resources
 dev-python/platformdirs
 dev-python/pluggy
 dev-python/ply
@@ -444,7 +445,6 @@ eclass/kernel-2.eclass
 eclass/libtool.eclass
 eclass/linux-info.eclass
 eclass/linux-mod-r1.eclass
-eclass/linux-mod.eclass
 eclass/llvm-r1.eclass
 eclass/llvm-r2.eclass
 eclass/llvm-utils.eclass
@@ -480,6 +480,7 @@ eclass/python-r1.eclass
 eclass/python-single-r1.eclass
 eclass/python-utils-r1.eclass
 eclass/qmake-utils.eclass
+eclass/qt-utils.eclass
 eclass/readme.gentoo-r1.eclass
 eclass/rpm.eclass
 eclass/ruby-single.eclass
@@ -738,6 +739,7 @@ sys-process/audit
 sys-process/lsof
 sys-process/procps
 sys-process/psmisc
+sys-process/time
 sys-process/tini
 
 virtual/acl

sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords

@@ -10,13 +10,31 @@
 # Chewi maintains edk2 in Gentoo, and we generally want the latest.
 sys-firmware/edk2-bin
 
+# For podman 6.0.0
+=app-containers/aardvark-dns-2.0.0
+=app-containers/conmon-2.2.1
+=app-containers/container-libs-0.68.0
+
 # We always want the latest version available.
 =app-containers/containerd-2.2* ~amd64 ~arm64
 
 # Keep versions on both arches in sync.
 =app-containers/cri-tools-1.33.0 ~arm64
-=app-containers/incus-6.0.5-r1 ~arm64
-=app-containers/lxc-6.0.5 ~arm64
+
+# To address CVE-2026-30892
+=app-containers/crun-1.28
+
+# To address a bunch of CVEs
+=app-containers/incus-7.2
+
+# Keep versions on both arches in sync.
+=app-containers/lxc-7.0.0
+
+# For podman 6.0.0
+=app-containers/netavark-2.0.0
+
+# To address CVE-2026-33414, CVE-2026-44517, CVE-2026-57231
+=app-containers/podman-6.0.0
 
 # We always want the latest version available.
 =app-containers/runc-1.4* ~amd64 ~arm64
@@ -35,14 +53,11 @@ app-crypt/azure-keyvault-pkcs11
 # Needed by arm64-native SDK
 =app-crypt/ccid-1.6.1 ~arm64
 
-# Keep versions on both arches in sync.
-=app-crypt/mit-krb5-1.21.3-r1 ~arm64
-
 # No stable keywords yet because it's new.
 =app-emulation/open-vmdk-0.3.12 ~amd64
 
 # Keep versions on both arches in sync.
-=app-emulation/qemu-guest-agent-9.2.0 ~arm64
+=app-emulation/qemu-guest-agent-10.2.2
 
 # Packages are in Gentoo but not expected to be used outside Flatcar, so they
 # are generally never stabilised. Thus an unusual form is used to pick up the
@@ -82,9 +97,10 @@ dev-db/etcd amd64
 =dev-util/bsdiff-4.3-r4 **
 
 # Catalyst 4 is not stable yet, but earlier versions are masked now.
-=dev-util/catalyst-4.1.1 ~amd64 ~arm64
+=dev-util/catalyst-4.1.1-r1
 
 # Keep versions on both arches in sync.
+=net-dns/bind-9.20.23
 =net-firewall/conntrack-tools-1.4.9
 =net-libs/libnetfilter_cthelper-1.0.1-r1 ~arm64
 =net-libs/libnetfilter_cttimeout-1.0.1 ~arm64
@@ -95,6 +111,9 @@ dev-db/etcd amd64
 # Needed to address a CVE.
 =net-libs/ngtcp2-1.22.1
 
+# For podman 6.0.0
+=net-misc/passt-2026.05.26
+
 # Packages are in Gentoo but not expected to be used outside Flatcar, so they
 # are generally never stabilised. Thus an unusual form is used to pick up the
 # latest version of the package with the unstable keywords.
@@ -109,15 +128,14 @@ sys-apps/azure-vm-utils
 =sys-cluster/ipvsadm-1.31-r1 ~arm64
 
 # Keep versions on both arches in sync.
-=sys-fs/lxcfs-6.0.5 ~arm64
+=sys-fs/lxcfs-7.0.0
 
 # Our own ebuild fixing issues in Gentoo, hopefully will be fixed
 # there too eventually.
 =sys-libs/libselinux-3.8.1-r3 ~amd64 ~arm64
 
-# Use unstable version for cross-compile fix. This needs to be at least as new
-# as app-containers/docker.
-=app-containers/docker-cli-29.1.3
+# Keep versions on both arches in sync.
+=sys-libs/libunwind-1.8.3
 
 # Take this version early for a cross fix and buildpkg-proactive.
 =sys-apps/portage-3.0.81

sdk_container/src/third_party/portage-stable/acct-user/nobody/nobody-0-r2.ebuild

@@ -1,4 +1,4 @@
-# Copyright 2020-2024 Gentoo Authors
+# Copyright 2020-2026 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
 EAPI=8
@@ -13,5 +13,3 @@ ACCT_USER_HOME_PERMS=0755
 ACCT_USER_GROUPS=( nobody )
 
 acct-user_add_deps
-
-RDEPEND+=" acct-user/root"

sdk_container/src/third_party/portage-stable/app-admin/eselect/Manifest

@@ -1,3 +1 @@
-DIST eselect-1.4.30.tar.xz 186060 BLAKE2B f58c2bdacfcb933aef2414e65866a4be33d02ddc42005770fd4f3200a7aa0437d31301ac35991309d51f2e95e8be2eafa0590600281801c6c63db08b3451b9ef SHA512 89ff9af40849e5d712716c35705e21bfc5d073536da8750566368d519d1b7de823575ffe730faabab4170ca773df31e7bb9d633d8e48361704102987c5d3e681
-DIST eselect-1.4.31.tar.xz 186520 BLAKE2B f40851ffea69c0d8b0142b49669e1112fc34384b0c8f1f6ce8aebbfd48fb6a6f8239e8682d7fe8b49c9d27cc9f7cee4b7c781baef7780e347df90f7cd4b5131e SHA512 ffcd6cdb5aef51b2949893abfc3af356d3011e256671eaae588e3fe6ff41f7bf74167dccef8c794422704097c3351f5c457009b051bbc8f008b2d2f250fa9c1b
 DIST eselect-1.4.32.tar.xz 189020 BLAKE2B 18cf181f23f0a6cd95ca78fd1c5e039ca2222101b12957e640afb25f34033777e0554421613699b08b9f985a45ee803b16c202e2c2a3a0f55b741cdf5e5d8836 SHA512 facc2c75508175123ed4f4f8f79c157e0f8ce797f3bb98f4978379d6b75c5d502ab5a97497f5d7a8a1f21adc9f580bf59245502a4b3058eb7a25a03caca7c8f9

sdk_container/src/third_party/portage-stable/app-admin/eselect/eselect-1.4.32.ebuild

@@ -16,7 +16,7 @@ SRC_URI="https://dev.gentoo.org/~ulm/eselect/${P}.tar.xz"
 
 LICENSE="GPL-2+ || ( GPL-2+ CC-BY-SA-4.0 )"
 SLOT="0"
-KEYWORDS="~alpha ~amd64 ~arm ~arm64 ~hppa ~loong ~m68k ~mips ~ppc ~ppc64 ~riscv ~s390 ~sparc ~x86 ~arm64-macos ~x64-macos ~x64-solaris"
+KEYWORDS="~alpha amd64 arm arm64 ~hppa ~loong ~m68k ~mips ppc ppc64 ~riscv ~s390 ~sparc x86 ~arm64-macos ~x64-macos ~x64-solaris"
 IUSE="doc emacs vim-syntax"
 
 # coreutils for realpath

sdk_container/src/third_party/portage-stable/app-admin/logrotate/files/logrotate-3.22.0-tests-locale.patch

@@ -0,0 +1,28 @@
+https://bugs.gentoo.org/934983
+https://github.com/logrotate/logrotate/commit/04b21743980c4e236ca5e8de18173fbd3848573b
+
+From 04b21743980c4e236ca5e8de18173fbd3848573b Mon Sep 17 00:00:00 2001
+From: =?UTF-8?q?Christian=20G=C3=B6ttsche?= <cgzones@googlemail.com>
+Date: Sat, 8 Jun 2024 17:59:40 +0200
+Subject: [PATCH] test: avoid locale dependent errno string
+
+String representations of errno values are locale dependent, thus avoid
+using them.
+---
+ test/test-0112.sh | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/test/test-0112.sh b/test/test-0112.sh
+index 812632b1..fa9eed65 100755
+--- a/test/test-0112.sh
++++ b/test/test-0112.sh
+@@ -23,7 +23,7 @@ test_reg.log.1.gz 1 zero
+ test_reg.log.2.gz 1 first
+ EOF
+
+-grep "test_fifo.log.1 (read-only) for compression: Operation not supported" error.log >/dev/null
++grep "^error: unable to open .*/test_fifo\.log\.1 (read-only) for compression: " error.log >/dev/null
+ if [ $? != 0 ]; then
+ 	echo "No error printed, but there should be one."
+ 	exit 3
+