3d14d5be00
Bump zlib for CVE
2026-02-21 15:53:39 +05:30
f7be96e947
Cleanup previous PR
2026-02-19 09:56:27 +05:30
f04d199a22
Improve calibre running detection in portable installer
...
Check multiple processes and give user option to retry instead of just
aborting. Fixes #3016
2026-02-19 09:15:13 +05:30
103bf48d66
Windows installer: Prompt to close running calibre when installing
2026-02-17 22:09:23 +05:30
5be7a6658d
Bump libpng for CVE
2026-02-13 08:58:40 +05:30
6b7acd199f
Fix typos, grammar errors, and incorrect references across documentation
...
Fix ~85 issues across 28 documentation files including misspellings,
subject-verb agreement errors, incorrect articles, missing punctuation,
and one incorrect URL scheme reference in url_scheme.rst.
2026-02-11 01:18:31 -05:00
a46c448fb7
Bump dependency for CVE
2026-02-07 14:55:38 +05:30
9938a6cb96
Replace use of eval in build script with ast.literal_eval
...
This is simply to spare me from noise from stupid AI driven automated scanners.
2026-02-02 11:06:45 +05:30
0af3a2d736
Bump OpenSSL version for CVEs
2026-01-29 20:23:17 +05:30
0305b65363
Bump dependencies for CVEs
2026-01-23 19:49:10 +05:30
eed6046be0
Bump libpng version for CVE
2026-01-14 14:20:10 +05:30
1adc288f70
Bump python patch version
...
Might as well since we are anyway updating all deps and 3.14.2 fixes
various regression in 3.14.
2025-12-10 23:24:05 +05:30
b9c738f017
...
2025-12-10 10:24:47 +05:30
2ea8a28072
The path to wix.exe has changed. Sigh.
2025-12-09 23:56:17 +05:30
b701d8e843
Fix delay loading of python DLL for python 3.14
2025-12-09 23:56:17 +05:30
a31b9a2454
Remove no longer present Qt Wayland DLL
2025-12-09 23:56:16 +05:30
c48dd2348f
Get easylzma building with modern cmake
2025-12-09 23:56:16 +05:30
25b4a05ae7
Bump some library versions
2025-12-09 23:56:16 +05:30
a5ebc701cf
Update all dependencies
2025-12-09 23:56:16 +05:30
c0666f2432
Bump libpng version for CVE
2025-12-08 22:30:18 +05:30
68bd509fb7
Bump version of libpng
2025-11-28 21:01:53 +05:30
9183cc57b0
Bump brotli for CVE
2025-11-01 09:34:46 +05:30
46131413bf
Bump python for CVE
2025-10-10 18:55:43 +05:30
2ebd196769
Fix incorrect sqlite soname in frozen Linux bundle
...
Fixes #2125721 [Install of 8.11.0 on Linux fails with "Setting up completion failed with error"](https://bugs.launchpad.net/calibre/+bug/2125721 )
2025-09-26 09:32:46 +05:30
f92bfac622
...
2025-09-25 11:25:51 +05:30
23f0af168c
DRYer
2025-09-25 00:44:01 +05:30
8e148a1878
Sign launchers and utils
2025-09-25 00:20:43 +05:30
b97219f202
Switch to sign server based signing
2025-09-24 23:32:43 +05:30
b87badc7dd
Fix soname of sqlite on macOS
2025-09-24 12:24:08 +05:30
4ee4fa33fd
Bump lib versions in macos freeze script
2025-09-24 12:10:22 +05:30
285445b9e6
Fix name collision between C and Python brotli
2025-09-24 11:35:12 +05:30
74bd44574f
Bump version of deps for CVEs
2025-09-23 17:09:57 +05:30
de71a78da1
Bump glib for CVEs
2025-09-23 16:13:04 +05:30
1b55a5bbc6
Bump more deps with CVEs
2025-09-23 13:14:11 +05:30
ab8b2f234f
Bump deps with CVEs
2025-09-23 07:23:12 +05:30
98b6a0e175
Bump versions of some deps with CVEs
2025-09-23 00:42:04 +05:30
051c25f1fa
Add a retry when stripping files on Linux
2025-09-21 14:07:20 +05:30
95f9cd9584
Add test for poppler build and include lcms2 dll
2025-09-21 08:22:58 +05:30
f138d60a40
Bump some dependencies that have CVEs
...
poppler now requires lcms2
2025-09-21 07:09:57 +05:30
9fcfd14c6b
Bump version of node as it has some CVEs
...
Doesnt matter for us since its a build time dep but keeps the scanner
output clean.
2025-09-20 16:05:03 +05:30
dcc60d7df4
...
2025-09-18 22:54:23 +05:30
0976c55c24
Go back to using old expiring certificate
...
It's good till Oct 2nd so at least the next calibre release
is doable.
2025-09-18 20:04:12 +05:30
4d5671496d
Turn off signing of exe and dll files on windows
...
Now only the installers are signed. This is needed because
DigiCert now only allows a thousand files to be a signed a year.
And charges $800 per year for the privilege. There is an alternative of
using a HSM (hardware security module) but that doesnt work with
my remote VM based signing workflow.
There are over 200 exes and dlls in a single calibre install.
Until a better provider is found, dont sign them.
2025-09-18 18:47:26 +05:30
b03dbbe128
Migrate to using new Digicert keylocker cert for authenticode signing
...
The old one is about to expire. The new keylocker based service is
highway robbery some 800 dollars a year. Migrate to Azure Trust based
signing once that leaves beta for $120 a year instead, assuming it was
not designed by incompetent buffoons, which is always a possibility.
2025-09-18 14:40:17 +05:30
20dcc7331a
License info has now been centralised in bypy
2025-09-18 11:15:08 +05:30
fc61a33d10
...
2025-09-18 11:02:43 +05:30
9712309783
Use sqlite version in dotted notation
2025-09-17 23:02:13 +05:30
93f2261eda
Fix incorrect dep migration
2025-09-17 10:46:00 +05:30
2dd12298fa
Bump some dependency versions that have security advisories
2025-09-16 22:35:24 +05:30
c036356789
Move python dependencies into pyproject.toml
...
Integrates better with external tooling
2025-09-16 20:36:44 +05:30
Kovid Goyal
copilot-swe-agent[bot]
ron