454 Commits

Author SHA1 Message Date
Kovid Goyal
9183cc57b0
Bump brotli for CVE 2025-11-01 09:34:46 +05:30
Kovid Goyal
46131413bf
Bump python for CVE 2025-10-10 18:55:43 +05:30
Kovid Goyal
2ebd196769
Fix incorrect sqlite soname in frozen Linux bundle
Fixes #2125721 [Install of 8.11.0 on Linux fails with "Setting up completion failed with error"](https://bugs.launchpad.net/calibre/+bug/2125721)
2025-09-26 09:32:46 +05:30
Kovid Goyal
f92bfac622
... 2025-09-25 11:25:51 +05:30
Kovid Goyal
23f0af168c
DRYer 2025-09-25 00:44:01 +05:30
Kovid Goyal
8e148a1878
Sign launchers and utils 2025-09-25 00:20:43 +05:30
Kovid Goyal
b97219f202
Switch to sign server based signing 2025-09-24 23:32:43 +05:30
Kovid Goyal
b87badc7dd
Fix soname of sqlite on macOS 2025-09-24 12:24:08 +05:30
Kovid Goyal
4ee4fa33fd
Bump lib versions in macos freeze script 2025-09-24 12:10:22 +05:30
Kovid Goyal
285445b9e6
Fix name collision between C and Python brotli 2025-09-24 11:35:12 +05:30
Kovid Goyal
74bd44574f
Bump version of deps for CVEs 2025-09-23 17:09:57 +05:30
Kovid Goyal
de71a78da1
Bump glib for CVEs 2025-09-23 16:13:04 +05:30
Kovid Goyal
1b55a5bbc6
Bump more deps with CVEs 2025-09-23 13:14:11 +05:30
Kovid Goyal
ab8b2f234f
Bump deps with CVEs 2025-09-23 07:23:12 +05:30
Kovid Goyal
98b6a0e175
Bump versions of some deps with CVEs 2025-09-23 00:42:04 +05:30
Kovid Goyal
051c25f1fa
Add a retry when stripping files on Linux 2025-09-21 14:07:20 +05:30
Kovid Goyal
95f9cd9584
Add test for poppler build and include lcms2 dll 2025-09-21 08:22:58 +05:30
Kovid Goyal
f138d60a40
Bump some dependencies that have CVEs
poppler now requires lcms2
2025-09-21 07:09:57 +05:30
Kovid Goyal
9fcfd14c6b
Bump version of node as it has some CVEs
Doesnt matter for us since its a build time dep but keeps the scanner
output clean.
2025-09-20 16:05:03 +05:30
Kovid Goyal
dcc60d7df4
... 2025-09-18 22:54:23 +05:30
Kovid Goyal
0976c55c24
Go back to using old expiring certificate
It's good till Oct 2nd so at least the next calibre release
is doable.
2025-09-18 20:04:12 +05:30
Kovid Goyal
4d5671496d
Turn off signing of exe and dll files on windows
Now only the installers are signed. This is needed because
DigiCert now only allows a thousand files to be a signed a year.
And charges $800 per year for the privilege. There is an alternative of
using a HSM (hardware security module) but that doesnt work with
my remote VM based signing workflow.

There are over 200 exes and dlls in a single calibre install.
Until a better provider is found, dont sign them.
2025-09-18 18:47:26 +05:30
Kovid Goyal
b03dbbe128
Migrate to using new Digicert keylocker cert for authenticode signing
The old one is about to expire. The new keylocker based service is
highway robbery some 800 dollars a year. Migrate to Azure Trust based
signing once that leaves beta for $120 a year instead, assuming it was
not designed by incompetent buffoons, which is always a possibility.
2025-09-18 14:40:17 +05:30
Kovid Goyal
20dcc7331a
License info has now been centralised in bypy 2025-09-18 11:15:08 +05:30
Kovid Goyal
fc61a33d10
... 2025-09-18 11:02:43 +05:30
Kovid Goyal
9712309783
Use sqlite version in dotted notation 2025-09-17 23:02:13 +05:30
Kovid Goyal
93f2261eda
Fix incorrect dep migration 2025-09-17 10:46:00 +05:30
Kovid Goyal
2dd12298fa
Bump some dependency versions that have security advisories 2025-09-16 22:35:24 +05:30
Kovid Goyal
c036356789
Move python dependencies into pyproject.toml
Integrates better with external tooling
2025-09-16 20:36:44 +05:30
Kovid Goyal
05bc5e5bee
Add licensing and dep type info to sources.json 2025-09-10 07:51:12 +05:30
Kovid Goyal
070e65fa4a
Fix #2120482 [Private bug](https://bugs.launchpad.net/calibre/+bug/2120482) 2025-08-12 22:10:58 +05:30
Kovid Goyal
fa582d8f26
More work on using GPU to run inferencing 2025-07-30 21:00:10 +05:30
Kovid Goyal
650aeee96d
Get new piper module working on macOS 2025-07-30 21:00:09 +05:30
Kovid Goyal
9021419440
Get the piper module working on windows 2025-07-30 21:00:09 +05:30
Kovid Goyal
848de725de
Get the new piper module building on Linux 2025-07-30 21:00:09 +05:30
Kovid Goyal
69d348e532
Bump bundled version of py7zr 2025-06-04 13:12:38 +05:30
Kovid Goyal
0c7aa5bdca
Update bundled python
Updates python's private OpenSSL on windows to 3.0.15.
Fixes #2107411 [Old (incorrect?) version of OpenSSL is loaded on Windows](https://bugs.launchpad.net/calibre/+bug/2107411)
2025-04-16 12:12:58 +05:30
un-pogaz
b0d58ade70 add 'code' dictionary to codespell setting 2025-03-23 16:02:05 +01:00
Luz Paz
253030327b Fix various typos 2025-03-22 13:09:53 -04:00
Kovid Goyal
0d92c9f7dd
Extra Qt DLLs needed for Qt 6.8 2025-03-04 07:58:40 +05:30
Kovid Goyal
8d97c1021b
Update onnxruntime to get it to build with Xcode 15.4 2025-03-04 06:50:24 +05:30
Kovid Goyal
7862560ef0
Update bundled Qt to 6.8.2
In preparation for calibre 8
2025-03-04 04:59:23 +05:30
Kovid Goyal
1715558c8f
Bump openssl version
Bump to latest in 3.1 series. There are apparently some silly security
scanners that complain about the DLLs even though there are no actual
bugs in them that impact their usage in calibre. Oh well.

Fixes #2096749 [Private bug](https://bugs.launchpad.net/calibre/+bug/2096749)
2025-01-27 09:39:53 +05:30
Kovid Goyal
b83938314f
Windows build: Also sign the portable launcher exes 2025-01-02 17:00:39 +05:30
Kovid Goyal
b4533c3de5
Use calibre.zip rather than program.zip for notarization 2024-12-15 12:22:05 +05:30
Kovid Goyal
04d5728ef9
More work on de-vendoring pykakasi 2024-11-12 19:52:31 +05:30
Kovid Goyal
ec8c06caa9
Fix a regression that caused incorrect English transliteration of Japanese text even when the UI language is set to Japanese. Fixes #2087850 [[Enhancement] PLease use kakasi for Japanese](https://bugs.launchpad.net/calibre/+bug/2087850)
Devendor pykakasi. Upstream one seems to be in working order so use it.
2024-11-12 15:13:58 +05:30
Kovid Goyal
f207de192f
Add AppUserModelID to start menu shortcuts 2024-11-08 11:45:52 +05:30
Kovid Goyal
dd10d5ca52
Bundle dynamic DLLs for ffmpeg on Linux 2024-10-11 21:33:03 +05:30
Kovid Goyal
97d476811a
Windows: Use calibre's bundled SSL certificates instead of the system store by default
I am tired of all the bug reports about SSL cerificate verify failures
on windows caused by the windows certificate store not having needed
intermediate certificates. So use the bundled certificates instead which
are the set of certificates trusted by Firefox and curl.

Can be turned off via CALIBRE_USE_SYSTEM_CERTIFICATES=1 env var
2024-10-08 15:06:35 +05:30