Bump some dependencies that have CVEs

poppler now requires lcms2
This commit is contained in:
Kovid Goyal 2025-09-21 07:09:57 +05:30
parent 89652f81f0
commit f138d60a40
No known key found for this signature in database
GPG Key ID: 06BC317B515ACE7C

View File

@ -259,10 +259,10 @@
},
{
"name": "libtiff 4.6.0",
"name": "libtiff 4.7.1",
"unix": {
"file_extension": "tar.xz",
"hash": "sha256:e178649607d1e22b51cf361dd20a3753f244f022eefab1f2f218fc62ebaf87d2",
"hash": "sha256:b92017489bdc1db3a4c97191aa4b75366673cb746de0dce5d7a749d5954681ba",
"urls": ["http://download.osgeo.org/libtiff/tiff-{version}.{file_extension}"]
}
},
@ -327,19 +327,19 @@
},
{
"name": "libxml2 2.12.6",
"name": "libxml2 2.15.0",
"unix": {
"file_extension": "tar.xz",
"hash": "sha256:889c593a881a3db5fdd96cc9318c87df34eb648edfc458272ad46fd607353fbb",
"hash": "sha256:5abc766497c5b1d6d99231f662e30c99402a90d03b06c67b62d6c1179dedd561",
"urls": ["https://download.gnome.org/sources/libxml2/{version_except_last}/{filename}"]
}
},
{
"name": "libxslt 1.1.39",
"name": "libxslt 1.1.43",
"unix": {
"file_extension": "tar.xz",
"hash": "sha256:2a20ad621148339b0759c4d4e96719362dee64c9a096dbba625ba053846349f0",
"hash": "sha256:5a3d6b383ca5afc235b171118e90f5ff6aa27e9fea3303065231a6d403f0183a",
"urls": ["https://download.gnome.org/sources/libxslt/{version_except_last}/{filename}"]
}
},
@ -397,10 +397,19 @@
},
{
"name": "poppler 23.08.0",
"name": "lcms2 2.17",
"unix": {
"file_extension": "tar.gz",
"hash": "sha256:d11af569e42a1baa1650d20ad61d12e41af4fead4aa7964a01f93b08b53ab074",
"urls": ["https://github.com/mm2/Little-CMS/releases/download/lcms{version}/lcms2-{version}.{file_extension}"]
}
},
{
"name": "poppler 25.09.1",
"unix": {
"file_extension": "tar.xz",
"hash": "sha256:4a4bf7fc903b9f1a2ab7d04b7c5d8220db9bc6261cc73fdb9a826dc272f49aa8",
"hash": "sha256:0c1091d01d3dd1664a13816861e812d02b29201e96665454b81b52d261fad658",
"urls": ["https://poppler.freedesktop.org/{filename}"]
}
},